Alpine/wget: medium 6.5

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Action: Upgrade wget to 1.19.5-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2018-0494#Alpine:v3.18/wget
• https://security.alpinelinux.org/vuln/CVE-2018-0494

published 2018-05-06T22:29:00.217Z · modified 2026-10-23T17:17:55.143299095Z · JSON