Vulnerability	Vulnerable Version
H Arbitrary File Read/Write copier is an A library for rendering project templates. Affected versions of this package are vulnerable to Arbitrary File Read/Write via the exposure of `pathlib.Path` objects in the Jinja context, which have unconstrained I/O methods. An attacker can access or modify arbitrary files on the filesystem by leveraging template rendering to invoke these methods. How to fix Arbitrary File Read/Write? Upgrade `copier` to version 9.9.1 or higher.	[,9.9.1)
M Directory Traversal copier is an A library for rendering project templates. Affected versions of this package are vulnerable to Directory Traversal via the rendering process when generating a directory structure whose rendered path is either a relative parent path or an absolute path. An attacker can overwrite arbitrary files outside the intended destination directory by crafting a malicious template that leverages the `pathjoin` Jinja filter and the `_copier_conf.sep` variable. How to fix Directory Traversal? Upgrade `copier` to version 9.9.1 or higher.	[7.1.0,9.9.1)

Arbitrary File Read/Write

copier is an A library for rendering project templates.

Affected versions of this package are vulnerable to Arbitrary File Read/Write via the exposure of pathlib.Path objects in the Jinja context, which have unconstrained I/O methods. An attacker can access or modify arbitrary files on the filesystem by leveraging template rendering to invoke these methods.

How to fix Arbitrary File Read/Write?

Upgrade copier to version 9.9.1 or higher.

[,9.9.1)

Directory Traversal

copier is an A library for rendering project templates.

Affected versions of this package are vulnerable to Directory Traversal via the rendering process when generating a directory structure whose rendered path is either a relative parent path or an absolute path. An attacker can overwrite arbitrary files outside the intended destination directory by crafting a malicious template that leverages the pathjoin Jinja filter and the _copier_conf.sep variable.

How to fix Directory Traversal?

Upgrade copier to version 9.9.1 or higher.

[7.1.0,9.9.1)

Go back to all versions of this package