CVE-2026-23986
CVE-2026-23986 · Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently write to arbitrary directories outside the destination path by using directory a symlink along with `_preserve_symlinks: true` and a generated directory structure whose rendered path is inside the symlinked directory. This way, a malicious template author can create a template that overwrites arbitrary files (according to the user's write permissions), e.g., to cause havoc. Version 9.11.2 patches the issue.
CVSS 6.9 · Mittel · EPSS 0,3% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: python
Betroffene Produkte und Versionen
copier
- Softwareversionen
- < 9.11.2: Betroffen
Keine Korrektur veröffentlicht
copier PyPI
- Softwareversionen
- 2.0.0
- 2.0.1
- 2.1.0
- 2.2.1
- 2.2.2
- 2.2.3
- 2.3
- 2.3.1
- 2.3.2
- 2.3.3
- 2.4.0
- 2.4.1
- 2.4.2
- 2.5.0
- 2.5.1
- 3.0.0a3
- 3.0.0a5
- 3.0.0a6
- 3.0.0a7
- 3.0.0a8
- 3.0.0b1
- 3.0.1
- 3.0.2
- 3.0.3
- 3.0.4
- 3.0.5
- 3.0.6
- 3.1.0
- 3.2.0
- 4.0.0
- 4.0.1
- 4.0.2
- 4.1.0
- 5.0.0
- 5.1.0
- 6.0.0
- 6.0.0a0
- 6.0.0a2
- 6.0.0a3
- 6.0.0a4
- 6.0.0a5
- 6.0.0a6
- 6.0.0a7
- 6.0.0a9
- 6.0.0b0
- 6.1.0
- 6.2.0
- 7.0.1
- 7.1.0
- 7.1.0a0
- 7.2.0
- 8.0.0
- 8.1.0
- 8.2.0
- 8.3.0
- 9.0.1
- 9.1.0
- 9.1.1
- 9.10.0
- 9.10.1
- 9.10.2
- 9.10.3
- 9.11.0
- 9.11.1
- 9.2.0
- 9.3.0
- 9.3.1
- 9.4.0
- 9.4.1
- 9.5.0
- 9.6.0
- 9.7.0
- 9.7.1
- 9.8.0
- 9.9.0
- 9.9.1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 9.11.2
Auf 9.11.2 aktualisieren