Skip to content
OpenAdvisories

Vendor

spotipy-dev

4 known vulnerabilities.

Products

spotipy 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    CVE-2025-66040

    Spotipy has a XSS vulnerability in OAuth callback server

    Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.2, there is a cross-site scripting (XSS) vulnerability in the OAuth callback server that allows for JavaScript injection through the unsanitized error parameter. Attackers can execute …

    spotipy-dev spotipy spotipy spotipy Debian Ubuntu PyPI