copyparty
Security Risk Profile
30
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 28, 2025 to present
6
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
30/100
low
Severity Distribution
Critical
0High
2Medium
3Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
XSS
4
Most Affected Products
1. copyparty copyparty6
2. 9001 Copyparty6
3. pip/copyparty5
Recent Vulnerabilities
See more →CVE-2026-32109
CVSS 4.4EPSS 0%medium
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
3/11/2026
CVE-2026-32108
CVSS 2.3EPSS 0%low
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
3/11/2026
CVE-2026-27948
CVSS 6.1EPSS 0%medium
Copyparty vulnerable to eflected cross-site scripting via setck parameter
2/26/2026
CVE-2023-41471
CVSS 7.8high
8/29/2025🔧 No Patch
CVE-2025-54796
CVSS 7.5high
Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
8/1/2025
CVE-2025-54423
CVSS 6.1medium
copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata
7/28/2025
Monitor copyparty in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.