patrickjuchli

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

patrickjuchli records in CISA KEV

No patrickjuchli vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Basic-ftp 3 records HIGH

Records

3 records in Basic-ftp · all components

TI-2026-22075 CVE-2026-27699 · GHSA-5rq4-664w-9x2c

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

HIGH 82

The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00939 Published 2026-02-25 Fixed in 5.2.0 CWE-22

TI-2026-28837 CVE-2026-39983 · GHSA-chqc-8p9q-pq6q

FTP Command Injection via CRLF in basic-ftp

HIGH 76

basic-ftp is an FTP client for Node.js.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02223 Published 2026-04-09 Partial fix · 5.2.1 CWE-93

TI-2026-29925 CVE-2026-41324 · GHSA-rp42-5vxx-qpwr

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

HIGH 72

basic-ftp is an FTP client for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00332 Published 2026-04-24 Partial fix · 5.3.0 CWE-400

Open these records in search →

Critical	1
High	4
Medium	0
Low	0
No CVSS	0