9001 vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20255
3. 20267

Newest CVEs

• CVE-2026-104102

  copyparty FTP: upload outside defined volumes (limited path traversal)

  9001 · copyparty

  Medium5.3
• CVE-2026-93353

  copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers

  9001 · copyparty

  Low2.3
• CVE-2026-70657

  Copyparty: file/dirkey confusion

  9001 · copyparty

  Medium4.3
• CVE-2026-32109

  Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

  9001 · copyparty

  Low3.7
• CVE-2026-32108

  Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

  9001 · copyparty

  Low2.3
• CVE-2026-30974

  Copyparty volflag `nohtml` did not block javascript in svg files

  9001 · copyparty

  Medium4.6
• CVE-2026-27948

  Copyparty vulnerable to eflected cross-site scripting via setck parameter

  9001 · copyparty

  Medium5.4
• CVE-2025-58753

  copyparty: Sharing a single file does not fully restrict access to other files in source folder

  9001 · copyparty

  Medium5.3
• CVE-2025-54796

  Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page

  9001 · copyparty

  High7.5
• CVE-2025-54589

  copyparty Reflected XSS via Filter Parameter

  9001 · copyparty

  Medium6.3