aria2_project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

aria2_project records in CISA KEV

No aria2_project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aria2 2 records LOW

Records

2 records in Aria2 · all components

TI-2019-02616 CVE-2019-3500 · GHSA-g768-79g3-c28j

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication…

LOW 34

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2019-01-02 No fix listed CWE-532

TI-2026-07360 CVE-2026-8367 · GHSA-rpx3-3f8j-f6v2

aria2c Improper Certificate Validation

LOW 23

aria2c accepts a server certificate with incorrect Extended Key Usage (EKU).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00127 Published 2026-05-13 No fix listed CWE-295

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0