Skip to content
OpenAdvisories

Package · Debian

axel

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-118485

    Axel Download Accelerator Path Traversal via URL Filename Decoding

    Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f (URL-encoded ../) sequences in th…

    Axel Download Accelerator Axel axel Debian