<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: yooooomi-your-spotify</title><description>Every new CVE for yooooomi-your-spotify.</description><link>https://agentprime.io/</link><item><title>CVE-2024-28193: Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify</title><link>https://agentprime.io/advisories/CVE-2024-28193/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28193/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 20:19:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28192: NoSQL Injection Leading to Authentication Bypass in your_spotify</title><link>https://agentprime.io/advisories/CVE-2024-28192/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28192/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 20:15:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28194: Authentication Bypass Because of Hardcoded JWT Secret in your_spotify</title><link>https://agentprime.io/advisories/CVE-2024-28194/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28194/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 18:18:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-28195: Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify</title><link>https://agentprime.io/advisories/CVE-2024-28195/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28195/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 17:16:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28196: Clickjacking in your_spotify</title><link>https://agentprime.io/advisories/CVE-2024-28196/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28196/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 17:10:56 GMT</pubDate><category>CVE</category></item></channel></rss>