Vulnerabilidades de monkeytypegame (CVE)

Registros CVE publicados para monkeytypegame, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
9.3Crítica
CVE-2026-118762

Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's…

7.1Alta
CVE-2025-66563

Monkeytype vulnerable to stored XSS in approve quotes page

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source ar…