copier-org records

4 published records for vendor copier-org.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2026-23986No exploit	Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: truecopier-org · copier · CWE-61	Medium6.9	—	0.2%	Jan 21, 2026
27Monitor	CVE-2026-23968No exploit	Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: falsecopier-org · copier · CWE-61	Medium6.8	—	0.2%	Jan 21, 2026
22Monitor	CVE-2026-34730No exploit	Copier `_external_data` allows path traversal and absolute-path local file read without unsafe modecopier-org · copier · CWE-22 Path traversal	Medium5.5	—	0.2%	Apr 2, 2026
17Monitor	CVE-2026-34726No exploit	Copier `_subdirectory` allows template root escape via parent-directory traversalcopier-org · copier · CWE-22 Path traversal	Medium4.4	—	0.3%	Apr 2, 2026

CVE-2026-23986
27Monitor
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
MediumCVSS 6.9No exploitEPSS 0%
copier-org · copierJan 21, 2026
CVE-2026-23968
27Monitor
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
MediumCVSS 6.8No exploitEPSS 0%
copier-org · copierJan 21, 2026
CVE-2026-34730
22Monitor
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
MediumCVSS 5.5No exploitEPSS 0%
- Path traversal
copier-org · copierApr 2, 2026
CVE-2026-34726
17Monitor
Copier `_subdirectory` allows template root escape via parent-directory traversal
MediumCVSS 4.4No exploitEPSS 0%
- Path traversal
copier-org · copierApr 2, 2026