S3 redirect sanitization omits sensitive headers in github.com/rclone/rclone

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "SEMVER",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.75.0"
          }
        ]
      }
    ],
    "package": {
      "name": "github.com/rclone/rclone",
      "purl": "pkg:golang/github.com/rclone/rclone",
      "ecosystem": "Go"
    },
    "database_specific": {
      "source": "https://vuln.go.dev/ID/GO-2026-6188.json"
    },
    "ecosystem_specific": {
      "imports": [
        {
          "path": "github.com/rclone/rclone/backend/s3",
          "symbols": [
            "Fs.CleanUp",
            "Fs.CleanUpHidden",
            "Fs.Command",
            "Fs.Copy",
            "Fs.List",
            "Fs.ListP",
            "Fs.ListR",
            "Fs.Mkdir",
            "Fs.NewObject",
            "Fs.OpenChunkWriter",
            "Fs.PublicLink",
            "Fs.Purge",
            "Fs.Put",
            "Fs.PutStream",
            "Fs.Rmdir",
            "Fs.String",
            "IbmIamSigner.SignHTTP",
            "NewFs",
            "Object.Hash",
            "Object.Metadata",
            "Object.MimeType",
            "Object.ModTime",
            "Object.Open",
            "Object.Remove",
            "Object.SetModTime",
            "Object.SetTier",
            "Object.Update",
            "s3CheckRedirect",
            "s3ChunkWriter.Abort",
            "s3ChunkWriter.Close",
            "s3ChunkWriter.WriteChunk",
            "s3logger.Logf",
            "setEndpointValueForIDriveE2",
            "v1List.List",
            "v2List.List",
            "v2Signer.SignHTTP",
            "versionsList.List"
          ]
        }
      ]
    }
  }
]