Wget CVE-2018-20483 - HTTP credentials leaked via user.xdg.origin.url xattr

wget --xattr leaks Basic-auth credentials into POSIX xattrs (CVE-2018-20483)

Wget CVE-2018-20483: Credentials leaked into POSIX extended file attributes via user.xdg.origin.url

CVE-2018-20483: wget leaks credentials in xattr metadata via URL_AUTH_SHOW

wget CVE-2018-20483: xattr leaks URL userinfo (password) to file metadata