PYSEC-2026-1271 Copier's safe template has arbitrary filesystem read/write access

Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...

CVE-2026-34726

creationtimestamp| type| source ---|---|--- 2026-03-31 12:07:58+00:00| published-proof-of-concept| https://github.com/copier-org/copier/security/advisories/GHSA-85v3-4m8g-hrh6...