aria2 vulnerabilities

CVEs whose affected-version data names the aria2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-8367Medium· 4.8

4mo ago

aria2c accepts a server certificate with incorrect Extended Key Usage (EKU)

aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authenti…

▾ Sunlitaria2_project · aria2EPSS 0.13%via NVD