PyPI/copyparty CVE-2026-32108: low, EPSS 0.35%

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

Action: Upgrade copyparty to 1.20.12 or later.

pip install copyparty==1.20.12

Affected

Fixed versions

Sources

• osv: GHSA-67rw-2x62-mqqm
• https://github.com/9001/copyparty/security/advisories/GHSA-67rw-2x62-mqqm
• https://nvd.nist.gov/vuln/detail/CVE-2026-32108
• https://github.com/9001/copyparty
• https://github.com/pypa/advisory-database/tree/main/vulns/copyparty/PYSEC-2026-31.yaml

CVE-2026-32108 · published 2026-03-12T14:22:46Z · modified 2026-06-05T18:00:13.866223283Z · JSON