monkeytypegame vulnerabilities
5 published CVEs name monkeytypegame among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118762
Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN
monkeytypegame · monkeytype
Critical9.3 - CVE-2026-69183
Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)
monkeytypegame · monkeytype
High7.5 - CVE-2025-66563
Monkeytype vulnerable to stored XSS in approve quotes page
monkeytypegame · monkeytype
High7.1 - CVE-2025-59838
Monkeytype Vulnerable to Self-XSS on loading saved custom text
monkeytypegame · monkeytype
Low2.4 - CVE-2024-41127
Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.
monkeytypegame · monkeytype
High8.4