spotipy
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spotipy's cache file, containing spotify auth token, is created with overly broad permissions | spotipy | PyPI | High | Fix reported | |
| Path traversal in spotipy | spotipy | PyPI | Medium | Fix reported | |
| Spotipy has a XSS vulnerability in its OAuth callback server | spotipy | PyPI | Low | Fix reported |