CVE-2024-38428: wget url_skip_credentials semicolon causes hostname confusion

CVE-2024-38428: GNU Wget url_skip_credentials mishandles ';' in userinfo, enabling hostname confusion

CVE-2024-38428: URL parser hostname confusion via multiple @ characters in userinfo

CVE-2024-38428: wget url_skip_credentials semicolon/multi-@ hostname confusion

CVE-2024-38428: GNU Wget url_skip_credentials() treats ';' as userinfo terminator

CVE-2024-38428: wget URL parser allows multiple @ characters in hostname causing hostname confusion