Gnuwget vulnerabilities
We track 3 vulnerabilities in Gnuwget products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2026.
Latest Gnuwget vulnerabilities
- 7.1 High severity
wget: Integer Overflow or Wraparound
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large n
- 7.1 High severity
wget: Heap-based Buffer Overflow
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character se
- 7.5 High severity
wget: Out-of-bounds Read
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing