spotipy vulnerabilities (Ubuntu)

3 vulnerabilities.

• spotipy Ubuntu Spotipy has a XSS vulnerability in OAuth callback server CVE-2025-66040 Fix available 3.6 LowNovember 26, 2025
• spotipy Ubuntu Spotipy repo vulnerable to secrets exfiltration via `pull_request_target` CVE-2025-47928 Public exploit 9.1 CriticalMay 15, 2025
• spotipy Ubuntu Spotipy's cache file, containing spotify auth token, is created with overly broad permissions CVE-2025-27154 Fix available 8.4 HighFebruary 27, 2025