{"id":"UBUNTU-CVE-2026-111925","details":"(Mopidy before 4.0.5 contains a path traversal vulnerability that allow ...)","modified":"2026-10-23T10:35:54.986261159Z","published":"2026-10-23T00:00:00Z","upstream":["CVE-2026-111925"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-111925"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-111925"},{"type":"REPORT","url":"https://github.com/mopidy/mopidy/issues/2350"}],"affected":[{"package":{"name":"mopidy","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0-2","1.1.1-1","1.1.2-1","2.0.0-1","2.0.0-2"],"ecosystem_specific":{"binaries":[{"binary_name":"mopidy","binary_version":"2.0.0-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-1"],"ecosystem_specific":{"binaries":[{"binary_version":"2.1.0-1","binary_name":"mopidy"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.3-1","2.3.1-1","3.0.1-1","3.0.1-2"],"ecosystem_specific":{"binaries":[{"binary_version":"3.0.1-2","binary_name":"mopidy"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1-1","3.2.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"mopidy","binary_version":"3.2.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.1-1","3.4.2-1","3.4.2-1ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_version":"3.4.2-1ubuntu0.1","binary_name":"mopidy"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.2-6","3.4.2-8","3.4.2-8ubuntu1","4.0.4-2"],"ecosystem_specific":{"binaries":[{"binary_name":"mopidy","binary_version":"4.0.4-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}},{"package":{"name":"mopidy","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/mopidy?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.2-3","3.4.2-4","3.4.2-5","3.4.2-6"],"ecosystem_specific":{"binaries":[{"binary_version":"3.4.2-6","binary_name":"mopidy"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111925.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}