TI-2026-29925 CVE-2026-41324 · GHSA-rp42-5vxx-qpwr
basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()
Priority HIGH 72
basic-ftp is an FTP client for Node.js.
Vulnerabilities
3 records
TI-2026-28837 CVE-2026-39983 · GHSA-chqc-8p9q-pq6q
FTP Command Injection via CRLF in basic-ftp
Priority HIGH 76
basic-ftp is an FTP client for Node.js.
TI-2026-22075 CVE-2026-27699 · GHSA-5rq4-664w-9x2c
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
Priority HIGH 82
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method.