Spotipy-dev Spotipy vulnerabilities
- spotipy-dev spotipy Spotipy has a XSS vulnerability in OAuth callback server 3.6 Low
- spotipy-dev spotipy Spotipy repo vulnerable to secrets exfiltration via `pull_request_target` 9.1 Critical
- spotipy-dev spotipy Spotipy's cache file, containing spotify auth token, is created with overly broad permissions 8.4 High
- spotipy-dev spotipy spotipy Path traversal vulnerability that may lead to type confusion in URI handling code 0.0 None