A flaw was found in the wget package. There is an issue with mishandling semicolons in the userinfo subcomponent of a URI. This problem indicates possible insecure behavior in data that was supposed to be in the userinfo subcomponent, where it is misinterpreted as part of the host subcomponent.