horn-py (>=0.3.2, <=0.6.3) potentially affected by CVE-2026-23968 via copier (2.3.3)

copier PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - horn-py =0.3.2, =0.6.3 Source cves: CVE-2026-23968 Source advisory: OSV:PYSEC-2026-1274...

pytoil (>=0.34.0, <=0.35.0) potentially affected by CVE-2026-23968 via copier (6.1.0)

copier PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - pytoil =0.34.0, =0.35.0 Source cves: CVE-2026-23968 Source advisory: OSV:PYSEC-2026-1274...

CVE-2026-23968

CVE-2026-23968 affects Copier (library and CLI) prior to version 9.11.2. The issue lets a safe-looking template include arbitrary files/directories outside the local template via symlinks when _preserve_symlinks is false, effectively enabling read access to sensitive data. Version 9.11.2 patches ...

algokit (>=0.2.0, <=1.6.0), algorun (>=0.0.1b1, <=0.0.1b4) +12 more potentially affected by CVE-2026-23968 via copier (7.2.0)

copier PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - algokit =0.2.0, =0.0.1b1, =2.2.4, =0.0.1a3, =0.3.0, =0.6.0, =0.9.0, =0.1.16, =1.14.0 Source cves: CVE-2026-23968 Source advisory:...

biopipen (>=0.12.0, <=0.17.7), flet (0.9.0) +9 more potentially affected by CVE-2026-23968 via copier (8.1.0)

copier PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - biopipen =0.12.0, =0.5.0, =1.3.3, =0.5.4, =0.6.1, =0.12.6, =0.5.0, =0.1.0, =0.5.1 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8P...

entangled-cli (>=2.0.0, <=2.0.2), flet (>=0.10.0, <=0.11.0) +9 more potentially affected by CVE-2026-23968 via copier (8.3.0)

copier PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - entangled-cli =2.0.0, =0.10.0, =0.10.0, =0.1.1, =0.1.10, =0.7.1, =0.12.5, =4.1.0b1, =4.3.0b3, =4.1.0b1, =4.1.0b1, =4.3.4rc3 Source cves:...