What’s Vulnerable › Products

copier-org copier vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your copier-org copier version is affected

Latest copier-org copier vulnerabilities

• CVE-2026-62999 — Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass) (CVSS 7.5)
• CVE-2026-53951 — Copier: trust-prefix bypass via path traversal runs tasks unprompted (CVSS 8.8)
• CVE-2026-34730 — Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode (CVSS 5.5)
• CVE-2026-34726 — Copier `_subdirectory` allows template root escape via parent-directory traversal (CVSS 4.4)
• CVE-2026-23986 — Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true (CVSS 7.1)
• CVE-2026-23968 — Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false (CVSS 5.5)
• CVE-2025-55214 — Copier safe template has filesystem write access outside destination path (CVSS 6.9)
• CVE-2025-55201 — Copier safe template has arbitrary filesystem read/write access (CVSS 8.5)