CVE-2018-20483: wget leaks URL credentials into POSIX extended file attributes (xattrs)

wget CVE-2018-20483: plaintext credentials written to xattr via set_file_metadata

CVE-2018-20483: Information Leak via Extended Attributes in wget xattr.c

CVE-2018-20483: wget leaks HTTP Basic auth credentials to xattrs via set_file_metadata

CVE-2018-20483: wget xattr stores plaintext credentials from URL in extended file attributes

Wget CVE-2018-20483: Credentials leaked into POSIX extended file attributes via user.xdg.origin.url

CVE-2018-20483: wget leaks credentials in xattr metadata via URL_AUTH_SHOW