Skip to content
OpenAdvisories

Package · Debian

axel

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.1
    CVE-2026-118485

    Axel Download Accelerator Path Traversal via URL Filename Decoding

    Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f (URL-encoded ../) sequences in th…

    Axel Download Accelerator Axel axel Debian
  • Unscored —
    CVE-2020-13614

    An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.

    axel axel axel Debian Ubuntu Alpine
  • Unscored —
    CVE-2005-0390

    Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute…

    axel Debian