9001 Copyparty vulnerabilities

• 9001 copyparty copyparty FTP: upload outside defined volumes (limited path traversal) CVE-2026-104102 Fix available 5.3 MediumOctober 12, 2026
• 9001 copyparty copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers CVE-2026-93353 2.3 LowSeptember 24, 2026
• 9001 copyparty Copyparty: file/dirkey confusion CVE-2026-70657 Fix available 4.3 MediumAugust 18, 2026
• 9001 copyparty Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html` CVE-2026-32109 Fix available 3.7 LowMarch 11, 2026
• 9001 copyparty Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access CVE-2026-32108 Fix available 2.3 LowMarch 11, 2026
• 9001 copyparty Copyparty volflag `nohtml` did not block javascript in svg files CVE-2026-30974 Fix available 4.6 MediumMarch 10, 2026
• 9001 copyparty Copyparty vulnerable to eflected cross-site scripting via setck parameter CVE-2026-27948 Fix available 5.4 MediumFebruary 26, 2026
• 9001 copyparty copyparty: Sharing a single file does not fully restrict access to other files in source folder CVE-2025-58753 Fix available 5.3 MediumSeptember 9, 2025
• 9001 copyparty Cross Site Scripting vulnerability in copyparty v.1.9.1 allows a local attacker to execute... CVE-2023-41471 Disputed 7.8 HighAugust 29, 2025
• 9001 copyparty Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page CVE-2025-54796 Fix available 7.5 HighAugust 1, 2025
• 9001 copyparty copyparty Reflected XSS via Filter Parameter CVE-2025-54589 Public exploitFix available 6.3 MediumJuly 31, 2025
• 9001 copyparty copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata CVE-2025-54423 Fix available 5.4 MediumJuly 28, 2025
• 9001 copyparty copyparty renders unsanitized filenames as HTML when user uploads empty files CVE-2025-27145 Fix available 3.6 LowFebruary 25, 2025
• 9001 copyparty copyparty vulnerable to reflected cross-site scripting via k304 parameter CVE-2023-38501 Public exploitFix available 6.3 MediumJuly 25, 2023
• 9001 copyparty Path traversal in copyparty CVE-2023-37474 Public exploitFix available EPSS 44.9% 7.5 HighJuly 14, 2023