PYSEC-2025-5
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Published in 2020, the autodzee package is a Python library that bypasses Deezer API restrictions to download music. The package was found to exfiltrate user data to a hardcoded server, which could be used for malicious purposes.
What each source reports
OSVNo score
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Published in 2020, the autodzee package is a Python library that bypasses Deezer API restrictions to download music. The package was found to exfiltrate user data to a hardcoded server, which could be used for malicious purposes.
- Record
PYSEC-2025-5- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
browsercmdhbt2PyPI | All versions | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PYSEC-2025-5 is a vulnerability with no CVSS score yet in browsercmdhbt2, published February 26, 2025. No source lists public exploit code. No source names a fixed version.