pkg:PyPI/copier

All known vulnerabilities

• HIGH7.1CVE-2026-23986Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
  from 0, < 9.11.2
• MEDIUM5.5CVE-2026-34730Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
  from 0, < 9.14.1
• MEDIUM5.5CVE-2026-23968Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
  from 0, < 9.11.2
• MEDIUM4.4Copier `_subdirectory` allows template root escape via parent-directory traversal
  from 0, < 9.14.1
• —Copier's safe template has filesystem write access outside destination path
  >= 7.1.0, < 9.9.1
• —Copier's safe template has arbitrary filesystem read/write access
  from 0, < 9.9.1