Go/github.com/kopia/kopia CVE-2026-45695: critical 9.8, EPSS 1.61%

Kopia: RCE via SSH ProxyCommand Injection

Action: Upgrade github.com/kopia/kopia to 0.23.0 or later.

go get github.com/kopia/kopia@v0.23.0

Affected

Fixed versions

Sources

• osv: GHSA-2q4c-3mrw-63c3
• https://github.com/kopia/kopia/security/advisories/GHSA-2q4c-3mrw-63c3
• https://github.com/kopia/kopia/pull/5354
• https://github.com/kopia/kopia

CVE-2026-45695 · published 2026-05-19T19:18:32Z · modified 2026-06-02T05:15:10.039676295Z · JSON