{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/49778?format=json","vulnerability_id":"VCID-39gn-dn43-cbb8","summary":"Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true\nCopier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use [unsafe](https://copier.readthedocs.io/en/stable/configuring/#unsafe) features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently write to arbitrary directories outside the destination path by using directory a symlink along with [`_preserve_symlinks: true`](https://copier.readthedocs.io/en/stable/configuring/#preserve_symlinks) and a [generated directory structure](https://copier.readthedocs.io/en/stable/configuring/#generating-a-directory-structure) whose rendered path is inside the symlinked directory. This way, a malicious template author can create a template that overwrites arbitrary files (according to the user's write permissions), e.g., to cause havoc.\n\n> [!NOTE]\n>\n> At the time of writing, the exploit is non-deterministic, as Copier walks the template's file tree using [`os.scandir`](https://docs.python.org/3/library/os.html#os.scandir) which yields directory entries in arbitrary order.\n\nReproducible example (may or may not work depending on directory entry yield order):\n\n```shell\nmkdir other/\npushd other/\necho \"sensitive\" > sensitive.txt\npopd\n\nmkdir src/\npushd src/\nln -s ../other other\necho \"overwritten\" > \"{{ pathjoin('other', 'sensitive.txt') }}.jinja\"\necho \"_preserve_symlinks: true\" > copier.yml\ntree .","aliases":[{"alias":"CVE-2026-23986"},{"alias":"GHSA-4fqp-r85r-hxqh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73516?format=json","purl":"pkg:pypi/copier@9.11.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.11.2"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/844227?format=json","purl":"pkg:pypi/copier@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844228?format=json","purl":"pkg:pypi/copier@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844229?format=json","purl":"pkg:pypi/copier@2.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844230?format=json","purl":"pkg:pypi/copier@2.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844231?format=json","purl":"pkg:pypi/copier@2.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/844232?format=json","purl":"pkg:pypi/copier@2.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/844233?format=json","purl":"pkg:pypi/copier@2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/844234?format=json","purl":"pkg:pypi/copier@2.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844235?format=json","purl":"pkg:pypi/copier@2.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/844236?format=json","purl":"pkg:pypi/copier@2.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/844237?format=json","purl":"pkg:pypi/copier@2.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844238?format=json","purl":"pkg:pypi/copier@2.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844239?format=json","purl":"pkg:pypi/copier@2.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/844240?format=json","purl":"pkg:pypi/copier@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844241?format=json","purl":"pkg:pypi/copier@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@2.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844242?format=json","purl":"pkg:pypi/copier@3.0.0a3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0a3"},{"url":"http://public2.vulnerablecode.io/api/packages/844243?format=json","purl":"pkg:pypi/copier@3.0.0a5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0a5"},{"url":"http://public2.vulnerablecode.io/api/packages/844244?format=json","purl":"pkg:pypi/copier@3.0.0a6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0a6"},{"url":"http://public2.vulnerablecode.io/api/packages/844245?format=json","purl":"pkg:pypi/copier@3.0.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0a7"},{"url":"http://public2.vulnerablecode.io/api/packages/844246?format=json","purl":"pkg:pypi/copier@3.0.0a8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0a8"},{"url":"http://public2.vulnerablecode.io/api/packages/844247?format=json","purl":"pkg:pypi/copier@3.0.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.0b1"},{"url":"http://public2.vulnerablecode.io/api/packages/844248?format=json","purl":"pkg:pypi/copier@3.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844249?format=json","purl":"pkg:pypi/copier@3.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/844250?format=json","purl":"pkg:pypi/copier@3.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/844251?format=json","purl":"pkg:pypi/copier@3.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/844252?format=json","purl":"pkg:pypi/copier@3.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.5"},{"url":"http://public2.vulnerablecode.io/api/packages/844253?format=json","purl":"pkg:pypi/copier@3.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.0.6"},{"url":"http://public2.vulnerablecode.io/api/packages/844254?format=json","purl":"pkg:pypi/copier@3.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844255?format=json","purl":"pkg:pypi/copier@3.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@3.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844256?format=json","purl":"pkg:pypi/copier@4.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@4.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844257?format=json","purl":"pkg:pypi/copier@4.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@4.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844258?format=json","purl":"pkg:pypi/copier@4.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@4.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/844259?format=json","purl":"pkg:pypi/copier@4.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@4.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844260?format=json","purl":"pkg:pypi/copier@5.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@5.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844261?format=json","purl":"pkg:pypi/copier@5.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@5.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844262?format=json","purl":"pkg:pypi/copier@6.0.0a0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a0"},{"url":"http://public2.vulnerablecode.io/api/packages/844263?format=json","purl":"pkg:pypi/copier@6.0.0a2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a2"},{"url":"http://public2.vulnerablecode.io/api/packages/844264?format=json","purl":"pkg:pypi/copier@6.0.0a3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a3"},{"url":"http://public2.vulnerablecode.io/api/packages/844265?format=json","purl":"pkg:pypi/copier@6.0.0a4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a4"},{"url":"http://public2.vulnerablecode.io/api/packages/844266?format=json","purl":"pkg:pypi/copier@6.0.0a5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a5"},{"url":"http://public2.vulnerablecode.io/api/packages/844267?format=json","purl":"pkg:pypi/copier@6.0.0a6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a6"},{"url":"http://public2.vulnerablecode.io/api/packages/844268?format=json","purl":"pkg:pypi/copier@6.0.0a7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a7"},{"url":"http://public2.vulnerablecode.io/api/packages/844269?format=json","purl":"pkg:pypi/copier@6.0.0a9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0a9"},{"url":"http://public2.vulnerablecode.io/api/packages/844270?format=json","purl":"pkg:pypi/copier@6.0.0b0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0b0"},{"url":"http://public2.vulnerablecode.io/api/packages/844271?format=json","purl":"pkg:pypi/copier@6.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844272?format=json","purl":"pkg:pypi/copier@6.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844273?format=json","purl":"pkg:pypi/copier@6.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@6.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844274?format=json","purl":"pkg:pypi/copier@7.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@7.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844275?format=json","purl":"pkg:pypi/copier@7.1.0a0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@7.1.0a0"},{"url":"http://public2.vulnerablecode.io/api/packages/86120?format=json","purl":"pkg:pypi/copier@7.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@7.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844276?format=json","purl":"pkg:pypi/copier@7.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@7.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844277?format=json","purl":"pkg:pypi/copier@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844278?format=json","purl":"pkg:pypi/copier@8.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@8.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844279?format=json","purl":"pkg:pypi/copier@8.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@8.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844280?format=json","purl":"pkg:pypi/copier@8.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@8.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844281?format=json","purl":"pkg:pypi/copier@9.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844282?format=json","purl":"pkg:pypi/copier@9.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844283?format=json","purl":"pkg:pypi/copier@9.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844284?format=json","purl":"pkg:pypi/copier@9.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844286?format=json","purl":"pkg:pypi/copier@9.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844288?format=json","purl":"pkg:pypi/copier@9.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844290?format=json","purl":"pkg:pypi/copier@9.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844291?format=json","purl":"pkg:pypi/copier@9.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844292?format=json","purl":"pkg:pypi/copier@9.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844293?format=json","purl":"pkg:pypi/copier@9.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844294?format=json","purl":"pkg:pypi/copier@9.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844295?format=json","purl":"pkg:pypi/copier@9.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/844296?format=json","purl":"pkg:pypi/copier@9.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/844297?format=json","purl":"pkg:pypi/copier@9.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-nm8s-s939-b7dt"},{"vulnerability":"VCID-tsz4-nc2r-zbdw"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/86119?format=json","purl":"pkg:pypi/copier@9.9.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.9.1"},{"url":"http://public2.vulnerablecode.io/api/packages/945247?format=json","purl":"pkg:pypi/copier@9.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.10.0"},{"url":"http://public2.vulnerablecode.io/api/packages/945248?format=json","purl":"pkg:pypi/copier@9.10.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.10.1"},{"url":"http://public2.vulnerablecode.io/api/packages/945249?format=json","purl":"pkg:pypi/copier@9.10.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.10.2"},{"url":"http://public2.vulnerablecode.io/api/packages/945250?format=json","purl":"pkg:pypi/copier@9.10.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.10.3"},{"url":"http://public2.vulnerablecode.io/api/packages/945251?format=json","purl":"pkg:pypi/copier@9.11.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.11.0"},{"url":"http://public2.vulnerablecode.io/api/packages/945252?format=json","purl":"pkg:pypi/copier@9.11.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39gn-dn43-cbb8"},{"vulnerability":"VCID-3r8r-7keg-3ygm"},{"vulnerability":"VCID-hn5b-sbrp-s3dh"},{"vulnerability":"VCID-v97a-ygd7-1fe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/copier@9.11.1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-23986","reference_id":"","reference_type":"","scores":[{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24628","published_at":"2026-06-09T12:55:00Z"},{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.2462","published_at":"2026-06-08T12:55:00Z"},{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24677","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24734","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00085","scoring_system":"epss","scoring_elements":"0.24744","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-23986"},{"reference_url":"https://github.com/copier-org/copier","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/copier-org/copier"},{"reference_url":"https://github.com/copier-org/copier/commit/b3a7b3772d17cf0e7a4481978188c9f536c8d8f6","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-22T15:10:50Z/"}],"url":"https://github.com/copier-org/copier/commit/b3a7b3772d17cf0e7a4481978188c9f536c8d8f6"},{"reference_url":"https://github.com/copier-org/copier/releases/tag/v9.11.2","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-22T15:10:50Z/"}],"url":"https://github.com/copier-org/copier/releases/tag/v9.11.2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23986","reference_id":"CVE-2026-23986","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23986"},{"reference_url":"https://github.com/advisories/GHSA-4fqp-r85r-hxqh","reference_id":"GHSA-4fqp-r85r-hxqh","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4fqp-r85r-hxqh"},{"reference_url":"https://github.com/copier-org/copier/security/advisories/GHSA-4fqp-r85r-hxqh","reference_id":"GHSA-4fqp-r85r-hxqh","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-22T15:10:50Z/"}],"url":"https://github.com/copier-org/copier/security/advisories/GHSA-4fqp-r85r-hxqh"}],"weaknesses":[{"cwe_id":61,"name":"UNIX Symbolic Link (Symlink) Following","description":"The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 7.1","exploitability":"0.5","weighted_severity":"6.4","risk_score":3.2,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-39gn-dn43-cbb8"}