PyPI/copier CVE-2025-55214: medium, EPSS 0.26%
Copier's safe template has filesystem write access outside destination path
Action: Upgrade copier to 9.9.1 or later.
pip install copier==9.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.1.0 | 9.9.1 | - |
Fixed versions
| 9.9.1 |
Sources
- osv: GHSA-p7q8-grrj-3m8w
- https://github.com/copier-org/copier/security/advisories/GHSA-p7q8-grrj-3m8w
- https://nvd.nist.gov/vuln/detail/CVE-2025-55214
- https://github.com/copier-org/copier/commit/fdbc0167cc22780b497e4db176feaf6f024757d6
- https://github.com/copier-org/copier
CVE-2025-55214 · published · modified · JSON