Homepage

spotipy@2.11.0 vulnerabilities

A light weight Python library for the Spotify Web API

  • latest version

    2.25.0

  • latest non vulnerable version

    2.25.0

  • first published

    14 years ago

  • latest version published

    17 days ago

  • licenses detected

  • View spotipy package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the spotipy package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Directory Traversal

    spotipy is an A light weight Python library for the Spotify Web API

    Affected versions of this package are vulnerable to Directory Traversal due to improper input validation. If a malicious URI is passed to the library, the library can be tricked into performing an operation on a different API endpoint than intended, which can contain

    How to fix Directory Traversal?

    Upgrade spotipy to version 2.22.1 or higher.

    [,2.22.1)
    Go back to all versions of this package