your_spotify vulnerabilities

2 known vulnerabilities in your_spotify from Yooooomi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  your_spotify: Use of Hard-coded Credentials

  CVE-2024-28194Mar 13, 2024Yooooomi

  your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use this well-known value to forge valid authentication tokens for arb

• 8.8 High severity

  your_spotify: Cross-Site Request Forgery

  CVE-2024-28195Mar 13, 2024Yooooomi

  your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery (CSRF). Attackers can use this to execute CSRF attacks on victims, allowing them to re