Vulnerabilidades de monkeytype (CVE)

Registros CVE publicados para monkeytype, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.1Alta

CVE-2025-66563 hace 11 meses

Monkeytype vulnerable to stored XSS in approve quotes page

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source ar…

2.4Baja

CVE-2025-59838 hace 1 año

Monkeytype Vulnerable to Self-XSS on loading saved custom text

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0.