html5lib is the distribution name for Kaltura's mwEmbed player library. Affected releases include v2.45, v2.103 and earlier, and other v2.x releases that expose the vulnerable mwEmbedLoader.php endpoint. The library contains unsafe deserialization flaws leading to RCE and file read.