Lucene search
+L

4 matches found

OSV
OSV
•added 2026/07/07 4:03 p.m.•17 views

PYSEC-2026-1273 Copier's safe template has filesystem write access outside destination path

Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path...

6.9CVSS6AI score0.00264EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/08/18 9:01 p.m.•17 views

Copier's safe template has filesystem write access outside destination path

Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path...

6.9CVSS7.2AI score0.00264EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/08/18 9:01 p.m.•31 views

GHSA-P7Q8-GRRJ-3M8W Copier's safe template has filesystem write access outside destination path

Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path...

6.9CVSS5.9AI score0.00264EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/21 12:00 a.m.•6 views

CVE-2008-6732: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

4.3CVSS5.9AI score0.01065EPSS
SaveExploits0References2
Rows per page
Query Builder