Approved changes feed: RSS · Atom

cpe:2.3:a:alfred-spotify-mini-player:alfred_spotify_mini_player:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlfred Spotify Mini Player (7350b814-1afb-55f2-b2aa-aa41f6875468)
ProductAlfred Spotify Mini Player (cc670ee2-3359-59c7-afc6-52e54e7a5677)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/citelao/spotify-for-alfred purl2cpe 2026-06-01 10:15:27.973023

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40927 vulnerable 2026-06-08 05:35:19.371554 Details available
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Published: 2021-10-01T15:42:09.000Z
Updated: 2024-08-04T02:59:30.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.