—
GO-2026-6456
rclone: S3 multipart declared-length memory exhaustion in github.com/rclone/rclone
Quick fix
GO-2026-6456 — github.com/rclone/rclone: upgrade to the fixed version with the command below.
go get github.com/rclone/rclone@v1.75.1Details
rclone: S3 multipart declared-length memory exhaustion in github.com/rclone/rclone
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/rclone/rclone
Introduced in:
1.75.0Fixed in: 1.75.1Fix
go get github.com/rclone/rclone@v1.75.1References
- https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-88045[ADVISORY]
- https://github.com/rclone/rclone/commit/7c1dfd99f3e6a22fcefd8686cc478226a15e63a1[FIX]
- https://github.com/rclone/rclone/commit/ab1f458013aaf6356e4bdeca61f7cb9139f8eb86[FIX]
- https://github.com/rclone/rclone/issues/9616[REPORT]
- https://github.com/rclone/rclone/releases/tag/v1.75.1[WEB]