{"action":"Upgrade copyparty to 1.18.9 or later.","affected":[{"fixed":"1.18.9","introduced":"0"}],"component":"copyparty","cve_ids":["CVE-2025-54796"],"ecosystem":"PyPI","epss":0.00495,"exploited":false,"fixed_versions":["1.18.9"],"ghsa_id":"GHSA-5662-2rj7-f2v6","id":"tcs_01M5KF05J324TJ14GJE1C9JSB1","modified_at":"2026-09-10T03:50:26.743035993Z","published_at":"2025-08-04T15:22:23Z","references":["https://osv.dev/vulnerability/GHSA-5662-2rj7-f2v6","https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6","https://nvd.nist.gov/vuln/detail/CVE-2025-54796","https://github.com/9001/copyparty/commit/09910ba80784c3980947d92f45db696398c0fd83","https://github.com/9001/copyparty","https://github.com/9001/copyparty/releases/tag/v1.18.9"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5662-2rj7-f2v6","url":"https://osv.dev/vulnerability/GHSA-5662-2rj7-f2v6"}],"summary":"copyparty allows Regex Denial of Service (ReDoS) in the upload listing"}