Medium
CVE-2026-70657
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
CVE-2025-58753
copyparty: Sharing a single file does not fully restrict access to other files in source folder
High
CVE-2025-54796
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
Medium
CVE-2025-54423
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
Medium
CVE-2025-54589
copyparty Reflected XSS via Filter Parameter
Low
CVE-2025-27145
copyparty renders unsanitized filenames as HTML when user uploads empty files
Low
CVE-2026-32109
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
Low
CVE-2026-32108
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
Medium
CVE-2026-30974
copyparty: volflag `nohtml` did not block javascript in svg files
Medium
CVE-2026-27948
Copyparty vulnerable to reflected XSS via setck parameter
High
CVE-2023-41471
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKE
Medium
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Medium
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
High
CVE-2023-37474
copyparty vulnerable to path traversal attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.