{"api_version":"v1","generated_at":"2026-10-07T22:50:00+00:00","product":{"cve_count":32,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-rclone-rclone-091467f90130","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/rclone","name":"rclone","next_cursor":null,"observations":[{"affected":"rclone: 1.56.0 < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-93987","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93987","fixed":"rclone: 1.75.1","last_modified":"2026-09-21T18:29:11.792Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-p6vx-hf7p-98j6","primary_source":"","published":"2026-09-19T11:53:38.413Z"},{"affected":"rclone: < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-93986","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93986","fixed":"rclone: 1.75.1","last_modified":"2026-09-21T20:46:58.617Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-3vxh-3pcx-9m8q","primary_source":"","published":"2026-09-19T11:53:37.737Z"},{"affected":"rclone: < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88046","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88046","fixed":"1.75.1.","last_modified":"2026-09-15T14:47:32.868Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-38xv-hf3p-h7mq","primary_source":"","published":"2026-09-10T16:14:49.587Z"},{"affected":">= 1.75.0, < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88045","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88045","fixed":"1.75.1.","last_modified":"2026-09-10T17:31:43.950Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f","primary_source":"","published":"2026-09-10T16:11:39.800Z"},{"affected":">= 1.70.0, < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88044","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88044","fixed":"1.75.1.","last_modified":"2026-09-10T17:14:40.559Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-p569-5gjg-9cmj","primary_source":"","published":"2026-09-10T16:08:14.619Z"},{"affected":"rclone: < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88018","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88018","fixed":"1.75.1.","last_modified":"2026-09-10T16:14:29.874Z","patch_url":"https://github.com/rclone/rclone/commit/90595f34f27f569be6b27c57fe5ab65057d323bd","primary_source":"","published":"2026-09-10T16:03:25.692Z"},{"affected":"rclone: >= 1.64.0, < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88017","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88017","fixed":"1.75.1.","last_modified":"2026-09-11T20:33:16.810Z","patch_url":"https://github.com/rclone/rclone/commit/c6af0b57c2b4af848bc968c2b407354476184b99","primary_source":"","published":"2026-09-10T15:55:15.871Z"},{"affected":"rclone: < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88016","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88016","fixed":"1.75.1.","last_modified":"2026-09-15T14:44:03.614Z","patch_url":"https://github.com/rclone/rclone/commit/17b0c03338a857bcb0a68d2d4c82ddbdec3f7893","primary_source":"","published":"2026-09-10T15:53:39.550Z"},{"affected":"rclone: < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88015","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88015","fixed":"1.75.1.","last_modified":"2026-09-10T16:01:48.110Z","patch_url":"https://github.com/rclone/rclone/commit/28bf49d66f94acc3f4f7f318504a706686281af9","primary_source":"","published":"2026-09-10T15:50:41.414Z"},{"affected":"rclone: >= 1.72.0, < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88014","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88014","fixed":"1.75.1.","last_modified":"2026-09-10T16:12:36.643Z","patch_url":"https://github.com/rclone/rclone/commit/5dae3adbf571a6cd9ba501eb47397a7e871e1ae0","primary_source":"","published":"2026-09-10T15:48:32.953Z"},{"affected":"rclone: >= 1.49.0, < 1.75.1","affected_versions_present":true,"cve_id":"CVE-2026-88013","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88013","fixed":"1.75.1.","last_modified":"2026-09-10T16:12:49.701Z","patch_url":"https://github.com/rclone/rclone/commit/22859b7e696cea3c563c6ba04c6b7f91f74456b4","primary_source":"","published":"2026-09-10T15:39:56.206Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-79783","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79783","fixed":"1.74.4","last_modified":"2026-08-25T16:11:49.885Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-945v-v9p3-v5xw","primary_source":"","published":"2026-08-25T15:16:11.806Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-79782","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79782","fixed":"1.74.4","last_modified":"2026-08-28T22:26:44.440Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-gx4c-2hqx-cw2r","primary_source":"","published":"2026-08-25T15:16:11.136Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-79781","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79781","fixed":"1.74.4","last_modified":"2026-08-25T17:29:20.262Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-8v25-v8p6-qf7v","primary_source":"","published":"2026-08-25T15:16:10.471Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-79780","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79780","fixed":"1.75.0","last_modified":"2026-08-25T16:07:21.266Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-8mxv-9xhp-86h4","primary_source":"","published":"2026-08-25T15:16:09.789Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-79779","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79779","fixed":"1.75.0","last_modified":"2026-08-27T16:45:55.566Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-h4mf-4v27-hggj","primary_source":"","published":"2026-08-25T15:16:09.110Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-79778","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79778","fixed":"1.75.0","last_modified":"2026-08-25T16:12:58.686Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-3x6r-wxxg-53vv","primary_source":"","published":"2026-08-25T15:16:08.402Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-79777","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79777","fixed":"1.75.0","last_modified":"2026-08-28T22:25:36.423Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-gwfq-86j8-7qhv","primary_source":"","published":"2026-08-25T15:16:07.745Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-79776","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79776","fixed":"1.75.0","last_modified":"2026-08-25T17:27:57.096Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-mfvx-7rcj-9m5g","primary_source":"","published":"2026-08-25T15:16:07.085Z"},{"affected":"1.72.0 \u2264 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-79775","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-79775","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-29T11:48:01.347Z","patch_url":"","primary_source":"","published":"2026-08-25T15:16:06.427Z"},{"affected":">= 1.51.0, < 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-71313","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71313","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-06T14:40:45.375Z","patch_url":"","primary_source":"","published":"2026-08-05T20:47:48.099Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-71312","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71312","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T03:55:21.917Z","patch_url":"","primary_source":"","published":"2026-08-05T20:37:49.029Z"},{"affected":"< 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-71311","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71311","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-06T18:44:51.691Z","patch_url":"","primary_source":"","published":"2026-08-05T20:33:32.558Z"},{"affected":"rclone: < 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-71310","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71310","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-31T14:53:51.616Z","patch_url":"","primary_source":"","published":"2026-08-05T20:17:14.858Z"},{"affected":">= 1.40.0, < 1.75.0","affected_versions_present":true,"cve_id":"CVE-2026-71309","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-71309","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-06T13:45:45.437Z","patch_url":"","primary_source":"","published":"2026-08-05T20:13:30.935Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-59733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59733","fixed":"1.74.4.","last_modified":"2026-07-29T19:26:44.815Z","patch_url":"https://github.com/rclone/rclone/commit/015fd0eba1cb138eef081517795fed47a2873f2d","primary_source":"","published":"2026-07-14T21:38:37.116Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-54572","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54572","fixed":"1.74.4.","last_modified":"2026-07-15T12:43:01.494Z","patch_url":"https://github.com/rclone/rclone/commit/1154afebee986180b489084d38e2a0c578751498","primary_source":"","published":"2026-07-14T21:37:41.882Z"},{"affected":"< 1.74.4","affected_versions_present":true,"cve_id":"CVE-2026-59732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59732","fixed":"1.74.4.","last_modified":"2026-07-21T14:43:46.387Z","patch_url":"https://github.com/rclone/rclone/commit/1a746732441e8158f32fab35924b23701e719a8c","primary_source":"","published":"2026-07-14T21:36:21.030Z"},{"affected":">= 1.46.0, < 1.74.3","affected_versions_present":true,"cve_id":"CVE-2026-49980","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49980","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T12:05:48.128Z","patch_url":"https://github.com/rclone/rclone/security/advisories/GHSA-qw24-gh76-8rvv","primary_source":"","published":"2026-06-24T17:52:33.024Z"},{"affected":">= 1.48.0, < 1.73.5","affected_versions_present":true,"cve_id":"CVE-2026-41179","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41179","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T00:59:47.559Z","patch_url":"","primary_source":"","published":"2026-04-23T00:03:36.282Z"},{"affected":">= 1.45.0, < 1.73.5","affected_versions_present":true,"cve_id":"CVE-2026-41176","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41176","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T00:59:50.871Z","patch_url":"","primary_source":"","published":"2026-04-22T23:57:54.075Z"},{"affected":">= 1.59.0, < 1.68.2","affected_versions_present":true,"cve_id":"CVE-2024-52522","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-52522","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-21T14:56:00.193Z","patch_url":"","primary_source":"","published":"2024-11-15T17:15:43.357Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"rclone"}}