Vulnerabilities

TI-2026-82689 CVE-2026-118762

Fork pull request runs code with elevated token in Monkeytype CI

HIGH 75

Monkeytype is a minimalistic and customizable typing test.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.0032 Published 2026-10-29 Fixed in 26.43.0 CWE-829

TI-2026-48535 CVE-2026-69183

HIGH 66

Monkeytype is a minimalistic and customizable typing test.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2026-08-20 No fix listed CWE-290

TI-2025-40974 CVE-2025-66563

HIGH 70

Monkeytype is a minimalistic and customizable typing test.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00256 Published 2025-12-04 No fix listed CWE-79

TI-2025-37277 CVE-2025-59838

MEDIUM 46

Monkeytype is a minimalistic and customizable typing test.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00252 Published 2025-09-25 Fixed in 25.44.0 CWE-79

TI-2024-27479 CVE-2024-41127

HIGH 76

Monkeytype is a minimalistic and customizable typing test.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00875 Published 2024-08-02 Fixed in 24.30.0 CWE-74