{"action":"Upgrade github.com/kopia/kopia to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0"}],"component":"github.com/kopia/kopia","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-j5vm-7qcc-2wwg","id":"tcs_01M5KFDHG5SWDBCGMWP423ZFSZ","modified_at":"2026-09-10T03:50:11.374239787Z","published_at":"2024-04-10T17:15:26Z","references":["https://osv.dev/vulnerability/GHSA-j5vm-7qcc-2wwg","https://github.com/kopia/kopia/security/advisories/GHSA-j5vm-7qcc-2wwg","https://github.com/kopia/kopia/pull/3589","https://github.com/kopia/kopia/commit/1d6f852cd6534f4bea978cbdc85c583803d79f77","https://github.com/kopia/kopia"],"severity":{"label":"low","score":2},"sources":[{"source":"osv","source_id":"GHSA-j5vm-7qcc-2wwg","url":"https://osv.dev/vulnerability/GHSA-j5vm-7qcc-2wwg"}],"summary":"Kopia: Storage connection credentials written to console on \"repository status\" CLI command with JSON output"}