copier
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Copier has a trust-prefix bypass via path traversal that runs tasks unprompted | copier | PyPI | High | Fix reported | |
| Copier `_subdirectory` allows template root escape via parent-directory traversal | copier | PyPI | Medium | Fix reported | |
| Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode | copier | PyPI | Medium | Fix reported | |
| Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false | copier | PyPI | Medium | Fix reported | |
| Copier's safe template has arbitrary filesystem read/write access | copier | PyPI | High | Fix reported | |
| Copier's safe template has filesystem write access outside destination path | copier | PyPI | Medium | Fix reported | |
| Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true | copier | PyPI | Medium | Fix reported |