copier-org copier vulnerabilities
8 published CVEs name copier-org copier among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-62999
Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass)
copier-org · copier
High7.5 - CVE-2026-53951
Copier: trust-prefix bypass via path traversal runs tasks unprompted
copier-org · copier
High8.8 - CVE-2026-34730
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
copier-org · copier
Medium5.5 - CVE-2026-34726
Copier `_subdirectory` allows template root escape via parent-directory traversal
copier-org · copier
Medium4.4 - CVE-2026-23986
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
copier-org · copier
Medium6.9 - CVE-2026-23968
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
copier-org · copier
Medium6.8 - CVE-2025-55214
Copier safe template has filesystem write access outside destination path
copier-org · copier
Medium6.9 - CVE-2025-55201
Copier safe template has arbitrary filesystem read/write access
copier-org · copier
High8.5