9001 copyparty

• CVE-2026-104102 Medium 5.3 copyparty FTP: upload outside defined volumes (limited path traversal) 0.3%
• CVE-2026-93353 Low 3.1 copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers 0.3%
• CVE-2026-70657 Medium 4.3 Copyparty: file/dirkey confusion 0.3%
• CVE-2026-32109 Low 3.7 Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html` 0.2%
• CVE-2026-32108 Low 2.3 Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access 0.3%
• CVE-2026-30974 Medium 4.6 Copyparty volflag `nohtml` did not block javascript in svg files 0.4%
• CVE-2026-27948 Medium 5.4 Copyparty vulnerable to eflected cross-site scripting via setck parameter 0.2%
• CVE-2025-58753 Medium 5.3 copyparty: Sharing a single file does not fully restrict access to other files in source folder 0.4%
• CVE-2025-54796 High 7.5 Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page 0.5%
• CVE-2025-54589 Medium 6.3 copyparty Reflected XSS via Filter Parameter 2.4%
• CVE-2025-54423 Medium 5.4 copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata 0.5%
• CVE-2025-27145 Low 3.6 copyparty renders unsanitized filenames as HTML when user uploads empty files 0.5%
• CVE-2023-38501 Medium 6.3 copyparty vulnerable to reflected cross-site scripting via k304 parameter 9.2%
• CVE-2023-37474 High 7.5 Path traversal in copyparty 44.9%