CVE-2019-3500

CVE-2019-3500 affects the download utility aria2 : when using --log, credentials (HTTP Basic username/password) can be written to a local log file, potentially exposing them to local users. The issue is tied to how aria2 handles logging rather than network flow, with vendor advisories and patch l...

CVE-2026-8367

aria2c is affected by an improper certificate validation issue where it accepts a server certificate with an incorrect Extended Key Usage (EKU). If an attacker obtains a certificate (with its private key) intended for a different purpose, they may reuse it to perform TLS server authentication aga...