Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

monkeytype — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in monkeytype, with AI-generated Chinese analysis, references, and POCs.

Vendor: monkeytypegame

CVE ID Title CVSS Severity Published
CVE-2026-69183 Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass) CWE-290 7.5 High 2026-08-20
CVE-2025-66563 Monkeytype vulnerable to stored XSS in approve quotes page CWE-79 6.1AI Medium AI 2025-12-04
CVE-2025-59838 Monkeytype Vulnerable to Self-XSS on loading saved custom text CWE-79 2.4 Low 2025-09-25
CVE-2024-41127 Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its `ci-failure-comment.yml` GitHub Workflow, enabling attackers to gain `pull-requests` write access. CWE-74 8.4 High 2024-08-02

All 4 known CVE vulnerabilities affecting monkeytype with full Chinese analysis, references, and POCs where available.