Copier _subdirectory allows template root escape via parent-directory traversal
PyPI copier · Upgrade to 9.14.1 or later · < 9.14.1 · CVE-2026-34726 · GHSA-85v3-4m8g-hrh6 · amended