{"action":"Upgrade copyparty to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"0"}],"component":"copyparty","cve_ids":["CVE-2023-37474"],"ecosystem":"PyPI","epss":0.4492,"exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-pxfv-7rr3-2qjg","id":"tcs_01M5KGJDM9BBHJHXZ44EV0XJS1","modified_at":"2023-11-08T04:13:02.226207Z","published_at":"2023-07-14T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-127","https://github.com/9001/copyparty/security/advisories/GHSA-pxfv-7rr3-2qjg","https://github.com/9001/copyparty/commit/043e3c7dd683113e2b1c15cacb9c8e68f76513ff"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-127","url":"https://osv.dev/vulnerability/PYSEC-2023-127"}],"summary":"Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker acce"}