Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-27948
5.4
MEDIUMCVSS v3
Published
February 26, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue.
9001/copyparty
GitHubPortable file server with accelerated resumable uploads, dedup, WebDAV, SFTP, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file
GitHubPortable file server with accelerated resumable uploads, dedup, WebDAV, SFTP, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file< 1.20.9NVD