npm/basic-ftp

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

Modified: 9/10/2026

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

Modified: 9/10/2026

basic-ftp has FTP Command Injection via CRLF

Modified: 9/10/2026

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

Modified: 9/10/2026

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Modified: 9/10/2026