{"uuid": "8154170c-afd3-4296-bd57-3b79e851ddf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "ghsa-h4mf-4v27-hggj", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mskm3mosqt2l", "content": "rclone's WebDAV backend leaked credentials over cleartext HTTP via HTTPS-to-HTTP redirects on the same host. CVSS 7.4 \u2014 upgrade to\u2026\n\nhttps://dev.to/cverports/ghsa-h4mf-4v27-hggj-ghsa-h4mf-4v27-hggj-webdav-credential-disclosure-via-same-host-https-to-http-4adg\n\n#appsec #DevSecOps", "creation_timestamp": "2026-08-08T08:00:20.728857Z"}