CVE-2022-24300: Debian Linux

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Minetest Minetest: before 5.4.0 (fixed in 5.4.0)

Published 2022-02-02. Last modified 2026-06-17.