Skip to content
OpenAdvisories

Package · Alpine

rclone

52 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.7

    rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

    rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to different hosts on HTTP 3xx redirects. Attackers who control or influence a cross-host red…

  • Low 2.9

    Incorrect calculation in CIRCL secp384r1 CombinedMult

    The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed…