PyPI/copyparty CVE-2025-27145: low 3.6, EPSS 0.47%
copyparty renders unsanitized filenames as HTML when user uploads empty files
Action: Upgrade copyparty to 1.16.15 or later.
pip install copyparty==1.16.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.15 | - |
Fixed versions
| 1.16.15 |
Sources
- osv: GHSA-m2jw-cj8v-937r
- https://github.com/9001/copyparty/security/advisories/GHSA-m2jw-cj8v-937r
- https://nvd.nist.gov/vuln/detail/CVE-2025-27145
- https://github.com/9001/copyparty/commit/438ea6ccb06f39d7cbb4b6ee7ad44606e21a63dd
- https://github.com/9001/copyparty
- https://github.com/9001/copyparty/releases/tag/v1.16.15
CVE-2025-27145 · published · modified · JSON