PyPI/copyparty CVE-2026-32109: medium 4.4, EPSS 0.17%
Copyparty is a portable file server. Prior to 1.20.12, if an attacker has been given both read- and write-permissions to the server, they can upload a malicious file with the filename .prologue.html a
Action: Upgrade copyparty to 1.20.12 or later.
pip install copyparty==1.20.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.20.12 | - |
Fixed versions
| 1.20.12 |
Sources
CVE-2026-32109 · published · modified · JSON