`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,117 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
1,509 repositories

Unique Repos (30 days):
164 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated about 16 hours ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 24 days ago • updated 8 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 9 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 24 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 1 month ago • updated 4 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

vamsii777/nuxt-usesuperflow #14

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

asleekgeek/pdf.js #637

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

google-marketing-solutions/tagsmith #29

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 5 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

mikesprague/bigred-link #1661

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /hb-events

hnuti-brontosaurus/brontosaurus.cz #77

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Unwrenchable/Side-Pocket #3

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

DesignLiquido/delegua #1184

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump basic-ftp from 5.2.0 to 5.2.2

aranyoray/komalweb #81

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in /design-system

paruff/fawkes #1308

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 6 comments

Bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

cityssm/sunrise-cms #142

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

ymm-oss/daigirin-2026 #80

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 5 comments

build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /packages/sdks/javascript

devopness/devopness #2892

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

KristjanESPERANTO/MagicMirror #57

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2

aws-samples/sample-autonomous-cloud-coding-agents #15

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /cors

hwride/security #46

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

jeremyckahn/farmhand #620

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

jayanthmb14/forthepeople #22

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

asml-actions-validation/tics-github-action #8

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

zero-to-mastery/Animation-Nation #3364

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

urluur/arriva-scraper #24

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

aws/aws-cdk #37573

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

jeevanshah07/soft-eng-group3 #5

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

devjiwonchoi/devjiwonchoi #924

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in /html/themes/custom/common_design_subtheme

UN-OCHA/rwint9-site #1392

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 4 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

BlueSignal-XYZ/marketplace #280

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 6 comments

chore(sdk): bump basic-ftp from 5.2.1 to 5.2.2 in /lib

opentdf/web-sdk #917

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.1 to 5.2.2

Codex-/cosmiconfig-typescript-loader #217

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

Stool233/moltworker #9

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /test/frontend-integration-test

kubeflow/pipelines #13257

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 4 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in /html/themes/custom/common_design_subtheme

UN-OCHA/unocha-site #782

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

selfagency/llm-stream-parser #38

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2 in /image_scrape_code

cjvillar/tf-image-train-workbook #2

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

ValbionGroup/BAE-Back #10

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

plume-app/lespetitsmolieres.fr #2

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

3zcurdia/nojx #135

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

daniel-hauser/moneyman #858

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

dlepaux/realtime-bpm-analyzer #105

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

Ramsey-USA/mh-website #19

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2 in /functions

quadralyst/arccms #27

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

monsoonfirepottery-byte/monsoonfire-portal #434

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.2

PetriLahdelma/digitaltableteur #521

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

mariojrrc/geonames-api-node #55

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Deiiv/Rubybot #90

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2

pmmmwh/react-refresh-webpack-plugin #976

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

WordPress/plugin-check #1257

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

oslokommune/okr-tracker #1097

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

TickTockBent/charlotte #151

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

silcam/AlphaChart #63

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

valantic/pimcore-elastica-bridge #130

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

ta-labs-org/copilot-agent-skills #20

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 843 (39.8%)

Merged 0 (0.0%)

Closed 1,274 (60.2%)

PR Types

Major 5 (0.2%)

Minor 1,427 (67.4%)

Patch 685 (32.4%)