PT-2026-35192 · Julia · Wget Jll

Publicado 2026-04-15 · Atualizado 2026-04-15

OSV

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.

Identificadores relacionados

JLSEC-2026-120

Produtos afetados

Wget Jll

Referências · 5

• https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace · Nota
• https://lists.debian.org/debian-lts-announce/2025/04/msg00029.html · Nota
• https://security.netapp.com/advisory/ntap-20241115-0005 · Nota
• https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html · Nota
• https://osv.dev/vulnerability/JLSEC-2026-120 · Aviso do Fabricante