MO
Vendor
monkeytypegame
5
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118762 New | MO monkeytype monkeytypegame | 9.3 | Oct 29 | Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN |
| CVE-2026-69183 | MO monkeytype monkeytypegame | 7.5 | Aug 20 | Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass) |
| CVE-2025-66563 | MO monkeytype monkeytypegame | 6.1 | Dec 4 | Monkeytype vulnerable to stored XSS in approve quotes page |
| CVE-2025-59838 | MO monkeytype monkeytypegame | 5.4 | Sep 25 | Monkeytype Vulnerable to Self-XSS on loading saved custom text |
| CVE-2024-41127 | MO monkeytype monkeytypegame | 9.6 | Aug 2 | Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access. |