CVE-2026-34726 Copier `_subdirectory` allows template root escape via parent-directory traversal

Copier is a library and CLI app for rendering project templates. Prior to version 9.14.1, Copier's subdirectory setting is documented as the subdirectory to use as the template root. However, the current implementation accepts parent-directory traversal such as .. and uses it directly when...

CVE-2026-34726

CVE-2026-34726 affects Copier (library/CLI) prior to version 9.14.1. The issue stems from the _subdirectory setting, which is documented as the template root but can accept directory traversal like .., and is used directly to compute the template root. This allows a template to escape its own dir...

CVE-2026-34726

Copier is a library and CLI app for rendering project templates. Prior to version 9.14.1, Copier's subdirectory setting is documented as the subdirectory to use as the template root. However, the current implementation accepts parent-directory traversal such as .. and uses it directly when...

CVE-2026-34726

creationtimestamp| type| source ---|---|--- 2026-03-31 12:07:58+00:00| published-proof-of-concept| https://github.com/copier-org/copier/security/advisories/GHSA-85v3-4m8g-hrh6...

CVE-2024-34726

The CVE-2024-34726 issue is in PVRSRV_MMap (pvr_bridge_k.c) of the PVR bridge kernel module. A logic error in PVRSRV_MMap can allow arbitrary code execution, enabling local kernel escalation of privilege with no extra execution privileges and without user interaction. The available documents do n...

CVE-2022-34726

creationtimestamp| type| source ---|---|--- 2022-09-13 22:25:39+00:00| seen| https://t.me/cibsecurity/49680...

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-34726 Microsoft ODBC Driver Remote Code Execution Vulnerability

...

CVE-2021-34726

creationtimestamp| type| source ---|---|--- 2021-09-23 07:29:42+00:00| seen| https://t.me/cibsecurity/29269...

CVE-2021-34726 Cisco SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation on certain C...

CVE-2021-34726

Cisco SD-WAN Software Command Injection (CVE-2021-34726) affects the CLI of Cisco SD-WAN Software. Affected component: CLI command handling; root cause: insufficient input validation on certain CLI commands. Impact: authenticated, local attacker with administrative privileges could inject and exe...

CVE-2025-34726

...