Approved changes feed: RSS · Atom

cpe:2.3:a:elinks:elinks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElinks (aeffb7b2-aba8-5a1b-8c20-2f5a58736582)
ProductElinks (243a1746-57a0-5579-8a81-9648601e016f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/elinks purl2cpe 2026-06-01 10:12:18.256842
pkg:deb/ubuntu/elinks purl2cpe 2026-06-01 10:12:18.256844
pkg:github/nabetaro/elinks purl2cpe 2026-06-01 10:12:18.256846
pkg:github/rkd77/elinks purl2cpe 2026-06-01 10:12:18.256847
pkg:gitlab/redhat/elinks purl2cpe 2026-06-01 10:12:18.256849
pkg:rpm/centos/elinks purl2cpe 2026-06-01 10:12:18.256850
pkg:rpm/fedora/elinks purl2cpe 2026-06-01 10:12:18.256851
pkg:rpm/opensuse/elinks purl2cpe 2026-06-01 10:12:18.256853

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-7224 vulnerable 2026-06-08 04:51:06.022486 Details available
Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.
Published: 2009-09-14T14:00:00.000Z
Updated: 2024-08-07T11:56:14.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5034 vulnerable 2026-06-08 04:49:57.726765 Details available
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
Published: 2007-09-21T20:00:00.000Z
Updated: 2024-08-07T15:17:27.970Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.