Copier
Copier-Org · 8 CVEs
Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix…
Jul 31, 2026
Copier: trust-prefix bypass via path traversal runs tasks unprompted
Jul 8, 2026
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
Apr 2, 2026
Copier `_subdirectory` allows template root escape via parent-directory traversal
Apr 2, 2026
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Jan 21, 2026
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
Jan 21, 2026
Copier safe template has filesystem write access outside destination path
Aug 18, 2025
Copier safe template has arbitrary filesystem read/write access
Aug 18, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-62999 | Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass) | HIGH | 0.44% | Jul 31, 2026 |
| CVE-2026-53951 | Copier: trust-prefix bypass via path traversal runs tasks unprompted | HIGH | 0.26% | Jul 8, 2026 |
| CVE-2026-34730 | Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode | MEDIUM | 0.21% | Apr 2, 2026 |
| CVE-2026-34726 | Copier `_subdirectory` allows template root escape via parent-directory traversal | MEDIUM | 0.37% | Apr 2, 2026 |
| CVE-2026-23986 | Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true | MEDIUM | 0.26% | Jan 21, 2026 |
| CVE-2026-23968 | Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false | MEDIUM | 0.24% | Jan 21, 2026 |
| CVE-2025-55214 | Copier safe template has filesystem write access outside destination path | MEDIUM | 0.26% | Aug 18, 2025 |
| CVE-2025-55201 | Copier safe template has arbitrary filesystem read/write access | HIGH | 0.26% | Aug 18, 2025 |
Showing 1 to 8 of 8 CVEs