spotipy-dev vulnerabilities
4 published CVEs name spotipy-dev among the affected products.
- 4Published CVEs3 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-66040
Spotipy has a XSS vulnerability in OAuth callback server
spotipy-dev · spotipy
Low3.6 - CVE-2025-47928
Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`
spotipy-dev · spotipy
Critical9.1 - CVE-2025-27154
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions
spotipy-dev · spotipy
High8.4 - CVE-2023-23608
spotipy Path traversal vulnerability that may lead to type confusion in URI handling code
spotipy-dev · spotipy
None0.0