Vulnerabilities in monkeytypegame

3 results

CVE-2024-41127HIGHMonkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access.EPSS 0.8%CVE-2025-59838LOWMonkeytype Vulnerable to Self-XSS on loading saved custom textEPSS 0.2%CVE-2025-66563HIGHMonkeytype vulnerable to stored XSS in approve quotes pageEPSS 0.2%