Search for packages
Package details: pkg:deb/debian/wget@1.21-1%2Bdeb11u1
purl pkg:deb/debian/wget@1.21-1%2Bdeb11u1
Next non-vulnerable version 1.25.0-2
Latest non-vulnerable version 1.25.0-2
Risk 4.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-575t-hvnv-c3ab
Aliases:
CVE-2024-10524
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
1.24.5-2
Affected by 0 other vulnerabilities.
1.25.0-2
Affected by 0 other vulnerabilities.
VCID-xzny-z3mh-aaan
Aliases:
CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.
1.21.3-1+deb12u1
Affected by 1 other vulnerability.
1.24.5-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T13:05:08.508516+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T01:34:36.614492+00:00 Debian Importer Affected by VCID-575t-hvnv-c3ab https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-04-26T08:10:25.457838+00:00 Debian Oval Importer Affected by VCID-xzny-z3mh-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-05T09:38:06.765950+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-04T04:19:06.329078+00:00 Debian Importer Affected by VCID-575t-hvnv-c3ab https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-22T00:15:16.468447+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-24T11:27:44.443307+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-10-11T07:15:15.380592+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-25T21:12:02.684689+00:00 Debian Importer Affected by VCID-xzny-z3mh-aaan https://security-tracker.debian.org/tracker/data/json 34.0.1