monkeytype Schwachstellen (CVE)

Für monkeytype veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

7.1Hoch

CVE-2025-66563 vor 11 Monaten

Monkeytype vulnerable to stored XSS in approve quotes page

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source ar…

2.4Niedrig

CVE-2025-59838 vor 1 Jahr

Monkeytype Vulnerable to Self-XSS on loading saved custom text

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0.