pypi

copyparty

26 Total advisories

26 Vulnerabilities

0 Malware

Dependency scanning

Check whether copyparty is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

copyparty

Vulnerabilities

copyparty allows Regex Denial of Service (ReDoS) in the upload listing

copyparty renders unsanitized filenames as HTML when user uploads empty files

copyparty vulnerable to path traversal attack

Copyparty vulnerable to file/dirkey confusion

Copyparty vulnerable to file/dirkey confusion

copyparty: volflag `nohtml` did not block javascript in svg files

Copyparty vulnerable to reflected XSS via setck parameter

CVE-2026-30974

CVE-2026-27948

CVE-2023-41471

copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

copyparty: Sharing a single file does not fully restrict access to other files in source folder

copyparty Reflected XSS via Filter Parameter

copyparty: Sharing a single file does not fully restrict access to other files in source folder

copyparty renders unsanitized filenames as HTML when user uploads empty files

copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

copyparty Reflected XSS via Filter Parameter

copyparty allows Regex Denial of Service (ReDoS) in the upload listing

Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

CVE-2026-32109

CVE-2026-32108

copyparty vulnerable to reflected cross-site scripting via k304 parameter

copyparty vulnerable to reflected cross-site scripting via hc parameter

CVE-2023-38501

CVE-2023-37474

Browse more PyPI advisories

Start Securing