github.com/ncw/rclone (Go)
Advisories
2
Latest version
—
License
—
OpenSSF Scorecard
—
Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-qw24-gh76-8rvv Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix |
Critical EPSS 0.78% |
>= 1.46.0 | No fix yet |
| GHSA-jfwf-28xr-xw6q RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution |
Critical EPSS 8.58% |
>= 1.48.0 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor