python-spotipy vulnerabilities (openSUSE)

2 vulnerabilities.

• python-spotipy openSUSE Spotipy has a XSS vulnerability in OAuth callback server CVE-2025-66040 Fix available 3.6 LowNovember 26, 2025
• python-spotipy openSUSE Spotipy's cache file, containing spotify auth token, is created with overly broad permissions CVE-2025-27154 Fix available 8.4 HighFebruary 27, 2025