VDB

GCVE-110-MAGEIA-2026-143

GCVE-110-MAGEIA-2026-143
Advisory Published
Vulnetix · Advisory published September 30, 2026
Borgbackup uses the msgpack python module, and it includes a stopping check for exactly the version 1.2.1. It also recognises an option to disable this check. The updated package shunts this check, which seems overzealous.

Affected Products

VendorProductVersionsPlatforms
Mageiaborgbackup0 (affected), 1.4.5-1.1.mga10 (unaffected)—
Mageiagolang0 (affected), 1.25.10-1.mga9 (unaffected), 0 (affected), 1.25.10-1.mga9 (unaffected)—

Browse GCVE Records

3,369 records in the GCVE database · Updated October 7, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›