8000 Security Overview · spotipy-dev/spotipy · GitHub

More Web Proxy on the site http://driver.im/

Security

Report a vulnerability

.github/SECURITY.md

Security Policy

Supported Versions

Version	Supported
2.x	✅
1.x	❌

Reporting a Vulnerability

Report via https://github.com/spotipy-dev/spotipy/security/advisories.

Guidance: https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability.

Secrets exfiltration via `pull_request_target`
GHSA-h25v-8c87-rvm8 published May 15, 2025 by stephanebruckert

Critical
Cache file, containing spotify auth token, is created with overly broad permissions
GHSA-pwhh-q4h6-w599 published Feb 27, 2025 by stephanebruckert

High
Path traversal vulnerability that may lead to type confusion in URI handling code
GHSA-q764-g6fm-555v published Jan 23, 2023 by stephanebruckert

Low

Learn more about advisories related to spotipy-dev/spotipy in the GitHub Advisory Database

0