—
GO-2026-6196
S3 session token leakage on HTTPS to HTTP redirect in github.com/rclone/rclone
Quick fix
GO-2026-6196 — github.com/rclone/rclone: upgrade to the fixed version with the command below.
go get github.com/rclone/rclone@v1.74.4Details
S3 session token leakage on HTTPS to HTTP redirect in github.com/rclone/rclone
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/rclone/rclone
Introduced in:
0 Fixed in: 1.74.4 Fix
go get github.com/rclone/rclone@v1.74.4