CVE-2026-34730 | copier-org copier up to 9.14.0 YAML File Parser _external_data path traversal (GHSA-hgjq-p8cr-gg4h)

A vulnerability labeled as critical has been found in copier-org copier up to 9.14.0. Affected by this vulnerability is the function _external_data of the component YAML File Parser. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-34730. It is possible to launch the attack on the local host. There is not any exploit available.

The affected component should be upgraded.