Threats affecting pkg:github/Axel

Axel Download Accelerator versions 2.17.14 and earlier contain a path traversal vulnerability due to improper handling of URL-encoded sequences in the output filename. This flaw allows an attacker to craft URLs with encoded '../' sequences that bypass URL parsing and cause downloaded files to be written outside the intended directory.