Aria2 Project

1 CVEs across 2 Aria2 Project products. Browse Aria2 Project vulnerabilities, severities, and proof-of-concept exploits.

Aria2 Project products with known CVEs

ProductCVEs
Aria21
Aria2c1
Aria2 Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8367Medium4.82026-05-13aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued…
CVE-2019-3500High7.82019-01-02aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sen…