مركز الأمان

rclone CVE-2026-88013

rclone: http backend forwards custom/auth headers to a different host on redirect

rclone CVE-2026-79782

rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect

rclone CVE-2026-79783

rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote

rclone CVE-2026-79777

rclone: Verbose Stack Trace Disclosure in RC API Error Responses

Kopia GHSA-j5vm-7qcc-2wwg

Kopia: Storage connection credentials written to console on "repository status" CLI command with JSON output