Skip to content
OpenAdvisories

Package · Go

github.com/kopia/kopia

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2026-45695

    Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

    Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthentic…

    kopia kopia github.com/kopia/kopia Go
  • Low 2.0
    GHSA-j5vm-7qcc-2wwg

    Kopia: Storage connection credentials written to console on "repository status" CLI command with JSON output

    ### Impact _What kind of vulnerability is it? Who is impacted?_ Storage credentials are written to the console. ### Patches _Has the problem been patched?_ Yes, see #3589 _What versions should users upgrade to?_ - Any version after or including commit 1d6f852…

    github.com/kopia/kopia Go