Package: src:vlc Version: 3.0.8-0+deb10u1 Still present in Buster (vlc 3.0.8-0+deb10u1).
There are other characters that are mishandled by either the m3u parsing or the path handling (as the path is built from local names in the m3u), but apparently I didn't report them as they were discovered and I have no notes with details. It was more useful to me to rename things as I came across them, I'm afraid. :-/