WG
Product
wget
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 5Low 0
Watch
Add wget to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13090 | 8.8 | Oct 27 | The retr.c:fd_read_body() function is called when processing OK responses Affected: through 1.19.1 |
| CVE-2017-13089 | 8.8 | Oct 27 | The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects Affected: through 1.19.1 |
| CVE-2016-4971 | 8.8 | Jun 30 | GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource Affected: before 1.18 |
| CVE-2016-7098 | 8.1 | Sep 26 | Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions… Affected: through 1.17 |
| CVE-2018-20483 | 7.8 | Dec 26 | set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file,… Affected: before 1.20.1 |
| CVE-2026-58469 | 7.5 | Jul 7 | GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing Affected: through 1.25.0 |
| CVE-2026-58472 | 7.1 | Jul 7 | GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding Affected: through 1.25.0 |
| CVE-2026-58471 | 7.1 | Jul 7 | GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c Affected: through 1.25.0 |
Showing 8