| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-49130 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injec ... |
| CVE-2026-49129 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Music Player Daemon (MPD) before version 0.24.11 contains a server-sid ... |
| CVE-2026-49128 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Music Player Daemon (MPD) before version 0.24.11 contains a path trave ... |
| CVE-2026-49127 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Music Player Daemon (MPD) before version 0.24.11 contains a stack buff ... |