Vulnerabilities

TI-2026-26974 CVE-2026-34730 · GHSA-hgjq-p8cr-gg4h

Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode

MEDIUM 58

Copier is a library and CLI app for rendering project templates.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00298 Published 2026-04-02 Fixed in 9.14.1 CWE-22

TI-2026-26970 CVE-2026-34726 · GHSA-85v3-4m8g-hrh6

MEDIUM 54

Copier is a library and CLI app for rendering project templates.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00397 Published 2026-04-02 Fixed in 9.14.1 CWE-22

TI-2026-19328 CVE-2026-23986 · GHSA-4fqp-r85r-hxqh

LOW 32

Copier is a library and CLI app for rendering project templates.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.0027 Published 2026-01-21 Fixed in 9.11.2 CWE-61

TI-2026-19310 CVE-2026-23968 · GHSA-xjhm-gp88-8pfx

LOW 30

Copier is a library and CLI app for rendering project templates.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00241 Published 2026-01-21 Fixed in 9.11.2 CWE-61