Monkeytypegame Monkeytype vulnerabilities
- monkeytypegame monkeytype Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN 9.3 Critical
- monkeytypegame monkeytype Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass) 7.5 High
- monkeytype Monkeytype vulnerable to stored XSS in approve quotes page 7.1 High
- monkeytype Monkeytype Vulnerable to Self-XSS on loading saved custom text 2.4 Low
- monkeytype Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access. 8.4 High