spotipy-dev vulnerabilities

4 published CVEs name spotipy-dev among the affected products.

Critical 1High 1Medium 0Low 1Not scored 1

CVEs per yearBy the year they were published

CVE-2025-66040
Spotipy has a XSS vulnerability in OAuth callback server
spotipy-dev · spotipy
Low3.6
CVE-2025-47928
Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`
spotipy-dev · spotipy
Critical9.1
CVE-2025-27154
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions
spotipy-dev · spotipy
High8.4
CVE-2023-23608
spotipy Path traversal vulnerability that may lead to type confusion in URI handling code
spotipy-dev · spotipy
None0.0