copier vulnerabilities (PyPI)
7 vulnerabilities.
-
copierPyPI Copier: trust-prefix bypass via path traversal runs tasks unprompted 8.8 High -
copierPyPI Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode 5.5 Medium -
copierPyPI Copier `_subdirectory` allows template root escape via parent-directory traversal 4.4 Medium -
copierPyPI Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true 6.9 Medium -
copierPyPI Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false 6.8 Medium -
copierPyPI Copier safe template has filesystem write access outside destination path 6.9 Medium -
copierPyPI Copier safe template has arbitrary filesystem read/write access 8.5 High