WG
Product
wget
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 5Low 0
Watch
Add wget to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0494 | 6.5 | May 6 | GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line Affected: before 1.19.5 |
| CVE-2021-31879 | 6.1 | Apr 29 | GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007 Affected: through 1.21.1 |
| CVE-2017-6508 | 6.1 | Mar 7 | CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host… Affected: through 1.19.1 |
| CVE-2026-58470 | 5.3 | Jul 7 | GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing Affected: through 1.25.0 |
| CVE-2026-16599 | 5.1 | Aug 25 | Denial of Service in GNU wget Affected: through 1.25.0 |
Showing 5