tocsin

PyPI/copyparty CVE-2026-32108: medium 6.5, EPSS 0.29%

Copyparty is a portable file server. Prior to 1.20.12, there was a missing permission-check in the shares feature (the shr global-option). This vulnerability only applies when the shares feature is us

Action: Upgrade copyparty to 1.20.12 or later.

pip install copyparty==1.20.12

Affected

introducedfixedlast affected
01.20.12-

Fixed versions

1.20.12

Sources

CVE-2026-32108 · published · modified · JSON