spotipy vulnerabilities (Debian)

2 vulnerabilities.

• spotipy Debian Spotipy has a XSS vulnerability in OAuth callback server CVE-2025-66040 Fix available 3.6 LowNovember 26, 2025
• spotipy Debian Spotipy's cache file, containing spotify auth token, is created with overly broad permissions CVE-2025-27154 Fix available 8.4 HighFebruary 27, 2025