Issues

Issues

• [SECURITY] aria2 Torrent Poisoning Vulnerability

  aria2/aria2#2411 · opened on Nov 11, 2026
  1

• BUG in input handling

  aria2/aria2#2410 · opened on Nov 10, 2026

• errorCode=1 Got EOF from the server - auto-retry does not work

  aria2/aria2#2408 · opened on Oct 29, 2026

• Build error against nettle 4

  aria2/aria2#2406 · opened on Oct 25, 2026

• 【BUG】不支持m3u8协议的视频流下载到smb协议的网盘中。希望可以修复这个问题。

  aria2/aria2#2405 · opened on Oct 19, 2026

• Download status messages are not displayed in real time when output is redirected

  aria2/aria2#2404 · opened on Oct 8, 2026

• [SECURITY] Unauthenticated JSON-RPC → Arbitrary File Write → Remote Code Execution (Cron-based RCE)

  aria2/aria2#2402 · opened on Oct 2, 2026

• attacker-controlled piece_length=0 in .torrent/magnet BitTorrent info dict causes SIGFPE divide-by-zero crash

  aria2/aria2#2400 · opened on Sep 18, 2026

• Build failiure with libc++ 23.1.0

  aria2/aria2#2398 · opened on Sep 7, 2026

• [feature request] Allow binding rpc to unix domain socket rather than a tcp port

  aria2/aria2#2397 · opened on Sep 6, 2026

• [Question] Can the exact same DHT file be safely used by different aria2c running processes?

  aria2/aria2#2395 · opened on Aug 29, 2026

• [Enhancement] JSON output from aria2c -S

  aria2/aria2#2394 · opened on Aug 28, 2026
  2

• No fallback when resuming a download if server does not respect the range header

  aria2/aria2#2393 · opened on Aug 24, 2026

• Signed 'char' truncation in 'util::fromHex'

  aria2/aria2#2392 · opened on Aug 24, 2026

• Shift of a negative value in 'SocketCore::setIpDscp'

  aria2/aria2#2391 · opened on Aug 24, 2026

• Float cast overflow in 'parseNsCookie'

  aria2/aria2#2390 · opened on Aug 24, 2026

• Integer truncation in 'Option::getAsInt'

  aria2/aria2#2389 · opened on Aug 24, 2026

• Signed 'char' conversion in 'JsonParser::consumeUnicode'

  aria2/aria2#2388 · opened on Aug 24, 2026

• Signed 'char' passed to an 'unsigned char' parameter in 'GroupId::toNumericId'

  aria2/aria2#2387 · opened on Aug 24, 2026

• Signed 'char' passed to an 'unsigned char' parameter in 'GroupId::expandUnique'

  aria2/aria2#2386 · opened on Aug 24, 2026

• Negative piece count returned as 'size_t' from 'DownloadContext::getNumPieces'

  aria2/aria2#2385 · opened on Aug 24, 2026

• UAF in 'DefaultPieceStorage::markPiecesDone'

  aria2/aria2#2384 · opened on Aug 24, 2026

• Type confusion in 'BtPostDownloadHandler::getNextRequestGroups'

  aria2/aria2#2383 · opened on Aug 24, 2026
  1

• Unchecked 'DiskAdaptor' downcast in 'BtPostDownloadHandler::getNextRequestGroups'

  aria2/aria2#2382 · opened on Aug 24, 2026
  1

• Integer truncation in 'bittorrent::processRootDictionary'

  aria2/aria2#2381 · opened on Aug 24, 2026
  1