CVE-2020-7632: Node-Mpv Project Node-Mpv

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

Affected products

• Node-Mpv Project Node-Mpv: up to and including 1.4.3

Published 2020-04-06. Last modified 2026-06-17.