Remote Code Execution (RCE)

node-mpv is vulnerable to remote code execution (RCE). The vulnerability exists because the parameter options was not sanitized properly, allowing to be controlled by the attacker by sending malicious code to execute.