Skip to content
OpenAdvisories

Package · PyPI

borgbackup

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.3
    CVE-2026-62268

    borg extract might modify out-of-tree files when extracting maliciously crafted archives

    borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.4.5 and 2.0.0b22, extracting a malicious archive can follow a symlinked parent path or resolve embedded dot-dot path components and delete or overwri…

    borgbackup borg borgbackup borgbackup Debian Ubuntu Alpine PyPI
  • Medium 4.7
    CVE-2023-36811

    Archive spoofing vulnerability in borgbackup

    borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the re…

    borgbackup borg borgbackup borgbackup Debian Ubuntu Alpine PyPI
  • High 8.8
    CVE-2017-15914

    Borg Improper Access Control vulnerability

    Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

    borgbackup borgbackup Debian PyPI