CVE-2026-53951

Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when the...

PT-2026-56480

Name of the Vulnerable Software and Affected Versions Copier versions 9.5.0 through 9.15.1 Description An issue exists in the trust setting's prefix match within copier/ settings.py where the template URL is compared against a trusted prefix using str.startswith without path normalization. Becaus...

PYSEC-2026-889 OpenStack Heat template URL information leakage

OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...