`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,117 Dependabot PRs

Latest PR:
about 6 hours ago

Unique Repositories:
1,509 repositories

Unique Repos (30 days):
164 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated about 19 hours ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 25 days ago • updated 8 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 9 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 24 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 1 month ago • updated 4 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Chore(deps): Bump basic-ftp from 5.2.1 to 5.2.2

grafana/grafana #122383

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2 in /web-components

openfoodfacts/openfoodfacts-webcomponents #498

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

projectseven-co-ltd/schedkit #16

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

QuiteAFancyEmerald/InvisiProxy #545

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Dilaxn/WebPulse #13

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

buildproven/postrail #128

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates

valle808/Humanese #63

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2 in /ui

OpenEMS/openems #3674

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in /rg_web in the npm_and_yarn group across 1 directory

axiom4/riccardogiannetto.com #154

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

style-dictionary/style-dictionary #1674

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

sto-info-app/sto-info-frontend #821

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /backend

jtpcode/pdf-generator #40

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

refactor: Bump basic-ftp from 5.2.1 to 5.2.2

parse-community/Parse-SDK-JS #3015

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /pi-packages/pi-agentmap

edmundmiller/dotfiles #70

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

Dargon789/safe-wallet-web #494

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

WebJamApps/CollegeLutheran #682

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Apofis391/automatizacion-whassap #4

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

Service-Unit-469/looker-downloader #239

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

chrillep/n8n-nodes-klaviyo-api #27

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

jonhaddow/priors-park-CC #334

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2 in /end-to-end-test

cBioPortal/cbioportal-frontend #5503

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

Hiram-Wong/zyfun #514

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

deps(deps): bump basic-ftp from 5.2.0 to 5.2.2

misty-step/scry #314

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 4 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

anthonylorendeaux/portofolio #55

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

deps(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

bwendell/gemini-desktop #269

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

therng/analytic #8

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

alizard0/rhdh #71

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

Integrail/marketplace-content #20

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

martinw82/logogenius-beta #49

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

PeteZah-Games/PeteZahNext #130

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

jelrod27/Weather-application- #338

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

pphatdev/cdn.api.pphat.stackdev.cloud #16

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /tools

McShelby/hugo-theme-relearn #1227

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

eryckassis/AI-Agency-Portfolio-Template-by-Nordic-Studio #14

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2 in /src/e2eTest

hmcts/pcs-api #1648

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

EOSC-Data-Commons/matchmaker #88

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2

akira-io/laravel-crypto #19

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Kielek/opentelemetry-demo #179

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

maplibre/maplibre-gl-geocoder #578

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

ukorvl/lightweight-charts-react-components #307

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /user/pi

bdsqqq/dots #19

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

ICJIA/lightcap-mcp #2

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /worker

oasm-platform/open-asm #332

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

remarkablemark/html-react-parser #2196

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.1 to 5.2.2 in /website

Open-AIP/OpenAIP #144

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /extensions/memory-hybrid

markus-lassfolk/openclaw-hybrid-memory #1117

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 5 comments

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2

guessi/aws-cdk #53

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

cityssm/lottery-licence-manager #824

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

security(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

microsoft/physical-ai-toolchain #454

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

rungalileo/docs-official #713

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 843 (39.8%)

Merged 0 (0.0%)

Closed 1,274 (60.2%)

PR Types

Major 5 (0.2%)

Minor 1,427 (67.4%)

Patch 685 (32.4%)