CVE-2025-27154

Spotipy is a lightweight Python library for the Spotify Web API. The "CacheHandler" class creates a cache file to store the auth token. Prior to version 2.25.1, the file created has "rw-r--r--" 644 permissions by default, when it could be locked down to "rw-------" 600 permissions. This leads to...