monkeytype güvenlik açıkları (CVE)

monkeytype için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

7.1Yüksek

CVE-2025-66563 11 ay önce

Monkeytype vulnerable to stored XSS in approve quotes page

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source ar…

2.4Düşük

CVE-2025-59838 1 yıl önce

Monkeytype Vulnerable to Self-XSS on loading saved custom text

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0.