What’s Vulnerable › Products

spotipy-dev spotipy vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your spotipy-dev spotipy version is affected

Latest spotipy-dev spotipy vulnerabilities

• CVE-2025-66040 — Spotipy has a XSS vulnerability in OAuth callback server (CVSS 3.6)
• CVE-2025-47928 — Spotipy repo vulnerable to secrets exfiltration via `pull_request_target` (CVSS 9.1)
• CVE-2025-27154 — Spotipy's cache file, containing spotify auth token, is created with overly broad permissions (CVSS 9.8)
• CVE-2023-23608 — spotipy Path traversal vulnerability that may lead to type confusion in URI handling code (CVSS 4.3)