copier-org copier

• CVE-2026-62999 High 7.5 Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass) 0.4%
• CVE-2026-53951 High 8.8 Copier: trust-prefix bypass via path traversal runs tasks unprompted 0.3%
• CVE-2026-34730 Medium 5.5 Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode 0.3%
• CVE-2026-34726 Medium 4.4 Copier `_subdirectory` allows template root escape via parent-directory traversal 0.4%
• CVE-2026-23986 Medium 6.9 Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true 0.3%
• CVE-2026-23968 Medium 6.8 Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false 0.2%
• CVE-2025-55214 Medium 6.9 Copier safe template has filesystem write access outside destination path 0.3%
• CVE-2025-55201 High 8.5 Copier safe template has arbitrary filesystem read/write access 0.3%