spotipy vulnerabilities (PyPI)

3 vulnerabilities.

• spotipy PyPI Spotipy has a XSS vulnerability in OAuth callback server CVE-2025-66040 Fix available 3.6 LowNovember 26, 2025
• spotipy PyPI Spotipy's cache file, containing spotify auth token, is created with overly broad permissions CVE-2025-27154 Fix available 8.4 HighFebruary 27, 2025
• spotipy PyPI spotipy Path traversal vulnerability that may lead to type confusion in URI handling code CVE-2023-23608 Fix available 0.0 NoneJanuary 23, 2023