Lynx vulnerabilities

It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?'. This could lead to the program connecting to a different host.

Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

Lynx allows a local user to overwrite sensitive files through /tmp symlinks.