Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
"https://github.com/pypa/advisory-database/blob/main/vulns/borgbackup/PYSEC-2018-105.yaml"