Rclone ("rsync for cloud storage") is a command-line program to sync files and directories to and from different cloud storage providers.
Official Partner Image: This image is created in partnership with the Rclone maintainers, ensuring enterprise-grade security with direct upstream support.
| CVE ID | Severity | Description | Package | Version | Actions |
|---|---|---|---|---|---|
| CVE-2025-4575 | Medium | libcrypto3 | 3.5.0-r0 | ||
| CVE-2025-4575 | Medium | libssl3 | 3.5.0-r0 | ||
| CVE-2025-46394 | Low | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. | busybox | 1.37.0-r18 | |
| CVE-2025-46394 | Low | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. | busybox-binsh | 1.37.0-r18 | |
| CVE-2025-46394 | Low | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. | ssl_client | 1.37.0-r18 | |
| CVE-2024-58251 | Low | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. | busybox | 1.37.0-r18 | |
| CVE-2024-58251 | Low | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. | busybox-binsh | 1.37.0-r18 | |
| CVE-2024-58251 | Low | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. | ssl_client | 1.37.0-r18 |
This image version has no known security vulnerabilities.
