PyPI/copier CVE-2025-55201: high 8.5, EPSS 0.26%

Copier's safe template has arbitrary filesystem read/write access

Action: Upgrade copier to 9.9.1 or later.

pip install copier==9.9.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1271
• nvd: CVE-2025-55201
• https://github.com/copier-org/copier/security/advisories/GHSA-3xw7-v6cj-5q8h
• https://github.com/copier-org/copier/commit/3feea3b3ff3c20d80cbb16a2f3b9567ffc5606d1
• https://github.com/copier-org/copier
• https://pypi.org/project/copier
• https://github.com/advisories/GHSA-3xw7-v6cj-5q8h

CVE-2025-55201 · published 2026-07-07T16:03:01.417882Z · modified 2026-07-07T17:47:12.903110875Z · JSON