GO-2026-6463
- Source
- https://pkg.go.dev/vuln/GO-2026-6463
- Import Source
- https://vuln.go.dev/ID/GO-2026-6463.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6463
- Aliases
- Published
- 2026-09-16T16:56:29Z
- Modified
- 2026-09-19T09:25:46Z
- Summary
- rclone: http backend forwards custom/auth headers to a different host on redirect in github.com/rclone/rclone
- Details
-
rclone: http backend forwards custom/auth headers to a different host on redirect in github.com/rclone/rclone
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6463" }- References
-
- https://github.com/rclone/rclone/security/advisories/GHSA-486v-q2wf-fp2r
- https://nvd.nist.gov/vuln/detail/CVE-2026-88013
- https://github.com/rclone/rclone/commit/22859b7e696cea3c563c6ba04c6b7f91f74456b4
- https://github.com/rclone/rclone/commit/79fbc0842f74e02cb84f0e3e7261d169983c8831
- https://github.com/rclone/rclone/commit/925fb4fb21eb25e75cd1b64fdd17ded857784bfc
- https://github.com/rclone/rclone/releases/tag/v1.75.1
Affected packages
Go / github.com/rclone/rclone
Package
- Name
- github.com/rclone/rclone
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/rclone/rclone
Ecosystem specific
{
"imports": [
{
"path": "github.com/rclone/rclone/backend/http",
"symbols": [
"Fs.Command",
"Fs.List",
"Fs.NewObject",
"Fs.httpConnection",
"NewFs",
"Object.Open"
]
},
{
"path": "github.com/rclone/rclone/fs/fshttp",
"symbols": [
"Transport.RoundTrip"
]
},
{
"path": "github.com/rclone/rclone/lib/rest",
"symbols": [
"PreserveMethodRedirectFn",
"RefuseHTTPSDowngradeRedirectFn",
"isHTTPSDowngrade"
]
}
]
}