dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23986 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HXQH...

data-pipelines-cli (>=0.31.0, <=0.32.0), pytoil (>=0.36.0, <=0.38.1) potentially affected by CVE-2026-23986 via copier (7.0.1)

copier PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - data-pipelines-cli =0.31.0, =0.36.0, =0.38.1 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HXQH...

biopipen (>=0.12.0, <=0.17.7), flet (0.9.0) +9 more potentially affected by CVE-2026-23986 via copier (8.1.0)

copier PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - biopipen =0.12.0, =0.5.0, =1.3.3, =0.5.4, =0.6.1, =0.12.6, =0.5.0, =0.1.0, =0.5.1 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HX...

algokit (>=2.7.0, <=2.10.0), cicd-tools (1.0.0) +12 more potentially affected by CVE-2026-23986 via copier (>=9.0.1, <=9.11.1)

copier PYPI version =9.0.1, =2.7.0, =1.6.0b0, =0.40.0, =0.1.58, =1.0.0, =4.3.4, =4.3.4, =4.3.4, =4.3.4, =2.9.1, =2.51.0 Source cves: CVE-2026-23986 Source advisory: GHSA-4FQP-R85R-HXQH...

algokit (>=2.7.0, <=2.10.0), cicd-tools (1.0.0) +12 more potentially affected by CVE-2026-23968 via copier (>=9.0.1, <=9.11.1)

copier PYPI version =9.0.1, =2.7.0, =1.6.0b0, =0.40.0, =0.1.58, =1.0.0, =4.3.4, =4.3.4, =4.3.4, =4.3.4, =2.9.1, =2.51.0 Source cves: CVE-2026-23968 Source advisory: GHSA-XJHM-GP88-8PFX...

data-pipelines-cli (>=0.31.0, <=0.32.0), pytoil (>=0.36.0, <=0.38.1) potentially affected by CVE-2026-23968 via copier (7.0.1)

copier PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - data-pipelines-cli =0.31.0, =0.36.0, =0.38.1 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8PFX...

pytoil (>=0.34.0, <=0.35.0) potentially affected by CVE-2026-23968 via copier (6.1.0)

copier PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - pytoil =0.34.0, =0.35.0 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8PFX...

dbt-coves (>=1.4.15, <=1.9.0), pytoil (>=0.32.1, <=0.33.0) potentially affected by CVE-2026-23968 via copier (6.0.0)

copier PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dbt-coves =1.4.15, =0.32.1, =0.33.0 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8PFX...