CVEs

You can find out about the CVEs assigned to borg in the changelogs:

• https://github.com/borgbackup/borg/blob/1.0-maint/docs/changes.rst
• https://github.com/borgbackup/borg/blob/1.1-maint/docs/changes.rst
• https://github.com/borgbackup/borg/blob/master/docs/changes.rst

Additionally, there were these CVEs which are not in the logs as they did not affect any borg release:

CVE-2015-4082

Vulnerable:	No Borg releases were affected.
Fixed in:	Borg
Important Note:	n/a
Mitre:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4082
Description:	An attacker with write access to a backup store can cause future backups to be uploaded without encryption.