PyPI/copyparty CVE-2026-104102: medium 5.3

copyparty FTP: upload outside defined volumes (limited path traversal)

Action: Upgrade copyparty to 1.20.19 or later.

pip install copyparty==1.20.19

Affected

Fixed versions

Sources

• osv: GHSA-phv8-wgjp-g4p9
• nvd: CVE-2026-104102
• https://github.com/9001/copyparty/security/advisories/GHSA-phv8-wgjp-g4p9
• https://github.com/9001/copyparty/commit/b331bb1c8c8cc306b91e4d94221969335a7a3e86
• https://github.com/9001/copyparty
• https://github.com/9001/copyparty/releases/tag/v1.20.19

CVE-2026-104102 · published 2026-10-15T20:16:38Z · modified 2026-10-15T20:30:08.635811757Z · JSON