CO
Vendor
copier-org
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62999 | CO copier copier-org | 7.5 | Jul 31 | Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass) |
| CVE-2026-53951 | CO copier copier-org | 8.8 | Jul 8 | Copier: trust-prefix bypass via path traversal runs tasks unprompted |
| CVE-2026-34730 | CO copier copier-org | 5.5 | Apr 2 | Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode |
| CVE-2026-34726 | CO copier copier-org | 4.4 | Apr 2 | Copier `_subdirectory` allows template root escape via parent-directory traversal |
| CVE-2026-23986 | CO copier copier-org | 7.1 | Jan 21 | Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true |
| CVE-2026-23968 | CO copier copier-org | 5.5 | Jan 21 | Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false |
| CVE-2025-55214 | CO copier copier-org | 6.9 | Aug 18 | Copier safe template has filesystem write access outside destination path |
| CVE-2025-55201 | CO copier copier-org | 8.5 | Aug 18 | Copier safe template has arbitrary filesystem read/write access |