Vendors / patrickjuchli Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now patrickjuchli records in CISA KEV No patrickjuchli vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00939 · Published 2026-02-25 · Fixed in 5.2.0 CWE-22
Priority HIGH 76
basic-ftp is an FTP client for Node.js.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.02223 · Published 2026-04-09 · Partial fix · 5.2.1 CWE-93
Priority HIGH 75
basic-ftp is an FTP client for Node.js.
CVSS 4.0 HIGH 8.2· Network · No auth · No interaction · EPSS 0.0037 · Published 2026-09-30 · Partial fix · 6.2.1 CWE-1333
Priority HIGH 72
basic-ftp is an FTP client for Node.js.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00514 · Published 2026-05-12 · Partial fix · 5.3.1 CWE-400
Priority HIGH 72
basic-ftp is an FTP client for Node.js.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00332 · Published 2026-04-24 · Partial fix · 5.3.0 CWE-400
Open these records in search → All records by CVSS severity
1 4 0 0 0
