Threats affecting pkg:golang/kopia

Kopia versions up to 0.23.1 have a path traversal vulnerability in the copyDirectoryContent function. This flaw allows users with repository write access to create snapshots with directory entries named '..', enabling them to write files outside the intended restore directory during restoration with default settings. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity.