[GHSA] GHSA-x5pq-m9p8-f4vx (medium) — Copyparty vulnerable to file/dirkey confusion

GHSA-x5pq-m9p8-f4vx Severity: medium CVE: CVE-2026-70657

Copyparty vulnerable to file/dirkey confusion

A valid filekey could potentially be converted into a dirkey, granting read-access to the containing folder.

This issue only affected volumes which simultaneously enable both filekeys and dirkeys, with volflag `dk` or `dks` combined with `fk` or `fka`.

Both required features are default-disab