JLSEC-2026-1161 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability...

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...