TI-2026-38919 CVE-2026-53951 · GHSA-9gmc-jqmh-3rvm
Copier: trust-prefix bypass via path traversal runs tasks unprompted
Priority HIGH 73
Copier is a library and CLI app for rendering project templates.
copier-org
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
copier-org records in CISA KEVNo copier-org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2025-34877 CVE-2025-55201 · GHSA-3xw7-v6cj-5q8h
Copier safe template has arbitrary filesystem read/write access
Priority HIGH 70
Copier library and CLI app for rendering project templates.
TI-2026-45000 CVE-2026-62999
Path traversal in copier-org copier
Priority HIGH 68
Copier is a library and CLI app for rendering project templates.
TI-2025-34889 CVE-2025-55214 · GHSA-p7q8-grrj-3m8w
Copier safe template has filesystem write access outside destination path
Priority MEDIUM 64
Copier library and CLI app for rendering project templates.
TI-2026-26974 CVE-2026-34730 · GHSA-hgjq-p8cr-gg4h
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
Priority MEDIUM 58
Copier is a library and CLI app for rendering project templates.
TI-2026-26970 CVE-2026-34726 · GHSA-85v3-4m8g-hrh6
Copier `_subdirectory` allows template root escape via parent-directory traversal
Priority MEDIUM 54
Copier is a library and CLI app for rendering project templates.
TI-2026-19328 CVE-2026-23986 · GHSA-4fqp-r85r-hxqh
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Priority LOW 32
Copier is a library and CLI app for rendering project templates.
TI-2026-19310 CVE-2026-23968 · GHSA-xjhm-gp88-8pfx
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
Priority LOW 30
Copier is a library and CLI app for rendering project templates.