copyparty vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-32109Lowcopyparty: Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`CVE-2026-32108Lowcopyparty: Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access CVE-2026-30974Mediumcopyparty: copyparty: volflag `nohtml` did not block javascript in svg files CVE-2026-27948Mediumcopyparty: Copyparty vulnerable to reflected XSS via setck parameter CVE-2025-58753Mediumcopyparty: copyparty: Sharing a single file does not fully restrict access to other files in source folder CVE-2025-54796Highcopyparty: copyparty allows Regex Denial of Service (ReDoS) in the upload listing CVE-2025-54589Mediumcopyparty: copyparty Reflected XSS via Filter Parameter CVE-2025-54423Mediumcopyparty: copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata CVE-2025-27145Lowcopyparty: copyparty renders unsanitized filenames as HTML when user uploads empty files CVE-2023-38501Mediumcopyparty: copyparty vulnerable to reflected cross-site scripting via k304 parameter GHSA-CW7J-V52W-FP5RMediumcopyparty: copyparty vulnerable to reflected cross-site scripting via hc parameter CVE-2023-37474Highcopyparty: copyparty vulnerable to path traversal attack

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo