An open index of dependabot pull requests across open source projects.

basic-ftp

Ecosystem:
npm
Package URL:
pkg:npm/basic-ftp
Total PRs:
2,049 Dependabot PRs
Latest PR:
about 11 hours ago
Unique Repositories:
1,463 repositories
Unique Repos (30 days):
144 repositories
Security Advisories
basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands
GHSA-6v7q-wjvx-w8wg HIGH published about 1 month ago • updated 12 days ago
## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...
basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering
GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 12 days ago • updated 5 days ago
## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...
basic-ftp has FTP Command Injection via CRLF
GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 1 month ago • updated 7 days ago
## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...
basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()
GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 1 month ago • updated 18 days ago
### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated about 7 hours ago
The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...
Recent PRs
Package Details
Name: basic-ftp
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/basic-ftp
JSON API: View JSON
Security Advisories

5

Active advisories
CRITICAL 1
HIGH 4
View All npm Advisories
Package Information
Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository: https://github.com/patrickjuchli/basic-ftp
Homepage: https://github.com/patrickjuchli/basic-ftp#readme
Latest Release: 5.1.0
5 months ago
Dependent Repos: 5,188
Dependent Packages: 271
Downloads: 50,604,527
Ranking: Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs
PR Status
Open 815 (39.8%)
Merged 0 (0.0%)
Closed 1,234 (60.2%)
PR Types
Major 3 (0.1%)
Patch 679 (33.1%)
Minor 1,367 (66.7%)