Vulnerabilities in monkeytypegame
4 resultsVexday analysis
O MonkeyTypeGame apresenta 3 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa conhecida ou com classificação crítica. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, mas sem registros de ataques recentes na base de dados, indicando postura de risco baixa no momento.
CVE-2024-41127HIGHMonkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.EPSS 0.9%CVE-2026-69183HIGHMonkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)EPSS 0.3%CVE-2025-66563HIGHMonkeytype vulnerable to stored XSS in approve quotes pageEPSS 0.2%CVE-2025-59838LOWMonkeytype Vulnerable to Self-XSS on loading saved custom textEPSS 0.2%