Spotipy-Dev

4 CVEs across 1 Spotipy-Dev products. Browse Spotipy-Dev vulnerabilities, severities, and proof-of-concept exploits.

Spotipy-Dev products with known CVEs

ProductCVEs
Spotipy4
Spotipy-Dev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66040Low3.62025-11-27Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.2, there is a cross-site scripting (XSS) vulnerability in the OAuth callback server…
CVE-2025-47928Critical9.12025-05-15Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using `pull_request_target` on `.github/workflows/i…
CVE-2025-27154Critical9.82025-02-27Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store the auth token. Prior to version 2.25.1…
CVE-2023-23608Unrated2023-01-26Spotipy is a light weight Python library for the Spotify Web API. In versions prior to 2.22.1, if a malicious URI is passed to the library, the library can be…