TI-2026-65547 CVE-2026-102990 · GHSA-c475-qrg2-pj4r
basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
Priority HIGH 75
basic-ftp is an FTP client for Node.js.
Vulnerabilities
5 records
TI-2026-32217 CVE-2026-44240 · GHSA-rpmf-866q-6p89
Uncontrolled resource consumption in patrickjuchli basic-ftp
Priority HIGH 72
basic-ftp is an FTP client for Node.js.
TI-2026-29925 CVE-2026-41324 · GHSA-rp42-5vxx-qpwr
basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()
Priority HIGH 72
basic-ftp is an FTP client for Node.js.
TI-2026-28837 CVE-2026-39983 · GHSA-chqc-8p9q-pq6q
FTP Command Injection via CRLF in basic-ftp
Priority HIGH 76
basic-ftp is an FTP client for Node.js.
TI-2026-22075 CVE-2026-27699 · GHSA-5rq4-664w-9x2c
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
Priority HIGH 82
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method.