Vuln
·
Scope
Home
Packages
KEV
Critical
Insights
Jobs
Pricing
EN
中
pkg:Debian/
spotipy
2 total CVEs
CRITICAL
1
LOW
1
✅ Check your installed version
Check
All known vulnerabilities
CRITICAL
9.8
CVE-2025-27154
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions
from 0, < 2.25.1-1
LOW
3.6
CVE-2025-66040
Spotipy has a XSS vulnerability in its OAuth callback server
from 0