{"action":"Upgrade borgbackup to 1.1.3 or later.","affected":[{"fixed":"1.1.3","introduced":"1.1.0b1"}],"component":"borgbackup","cve_ids":["CVE-2017-15914"],"ecosystem":"PyPI","epss":0.01918,"exploited":false,"fixed_versions":["1.1.3"],"ghsa_id":"GHSA-8q8v-28rm-qw4w","id":"tcs_01M5KF8V3TWSS884M9FZ45TC2P","modified_at":"2024-09-04T20:33:12.596888Z","published_at":"2022-05-13T01:44:03Z","references":["https://osv.dev/vulnerability/GHSA-8q8v-28rm-qw4w","https://nvd.nist.gov/vuln/detail/CVE-2017-15914","https://github.com/borgbackup/borg/commit/75854c1243b29ec5558be6fdefe365cd438abb4c","https://github.com/borgbackup/borg","https://github.com/pypa/advisory-database/tree/main/vulns/borgbackup/PYSEC-2018-105.yaml","http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8q8v-28rm-qw4w","url":"https://osv.dev/vulnerability/GHSA-8q8v-28rm-qw4w"}],"summary":"Borg Improper Access Control vulnerability"}