VDB
Sign up

GO-2026-6457

rclone: source object names can escape the configured root on upload in github.com/rclone/rclone

Quick fix

GO-2026-6457 — github.com/rclone/rclone: upgrade to the fixed version with the command below.

go get github.com/rclone/rclone@v1.75.1

Details

rclone: source object names can escape the configured root on upload in github.com/rclone/rclone

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/rclone/rclone
Introduced in: 0Fixed in: 1.75.1
Fixgo get github.com/rclone/rclone@v1.75.1

References