Skip to content

Spotipy Project Spotipy vulnerabilities

spotipy-dev spotipySpotipy's cache file, containing spotify auth token, is created with overly broad permissionsCVE-2025-27154Fix available8.4 HighFebruary 27, 2025
spotipy-dev spotipyspotipy Path traversal vulnerability that may lead to type confusion in URI handling codeCVE-2023-23608Fix available0.0 NoneJanuary 23, 2023