GO-2026-6458
- Source
- https://pkg.go.dev/vuln/GO-2026-6458
- Import Source
- https://vuln.go.dev/ID/GO-2026-6458.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6458
- Aliases
- Published
- 2026-09-16T16:56:29Z
- Modified
- 2026-09-17T17:40:51Z
- Summary
- rclone: FTP cross-session auth-proxy backend confusion in github.com/rclone/rclone
- Details
-
rclone: FTP cross-session auth-proxy backend confusion in github.com/rclone/rclone
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6458" }- References
Affected packages
Go / github.com/rclone/rclone
Package
- Name
- github.com/rclone/rclone
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/rclone/rclone
Ecosystem specific
{
"imports": [
{
"path": "github.com/rclone/rclone/cmd/serve/ftp",
"symbols": [
"AddFlags",
"FileInfo.Group",
"FileInfo.ModTime",
"FileInfo.Owner",
"Logger.Print",
"Logger.PrintCommand",
"Logger.PrintResponse",
"Logger.Printf",
"driver.Addr",
"driver.ChangeDir",
"driver.CheckPasswd",
"driver.DeleteDir",
"driver.DeleteFile",
"driver.GetFile",
"driver.ListDir",
"driver.MakeDir",
"driver.PutFile",
"driver.Rename",
"driver.Serve",
"driver.Shutdown",
"driver.Stat",
"driver.getVFS",
"newServer"
]
}
]
}