`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,117 Dependabot PRs

Latest PR:
about 8 hours ago

Unique Repositories:
1,509 repositories

Unique Repos (30 days):
164 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated about 22 hours ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 25 days ago • updated 8 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 9 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 24 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 1 month ago • updated 4 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

Ign14/pymerp.cl #64

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

rzelazko/lime-tracker #175

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

scriptex/round-carousel-component #116

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): Bump basic-ftp from 5.2.0 to 5.2.2

tinabel/accessibility-scraper #13

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in the npm_and_yarn group across 1 directory

Nick2bad4u/eslint-plugin-typefest #16

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

forbiddenlink/craft-audit #16

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

alexey-pelykh/puppeteer-capture #223

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

canonical/backstage #95

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

dmptrluke/foxtail #1569

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

dpobel/damien.pobel.fr #1123

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): Bump basic-ftp from 5.2.0 to 5.2.2

yasuhirokudo/crossnote #40

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

oorabona/unireq #11

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2 in /test/output-integration/browser

contentful/contentful-management.js #2978

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

fix(deps): bump basic-ftp from 5.2.0 to 5.2.2

forcedotcom/metadata-enrichment #46

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

tiobe/tics-github-action #513

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

BrowserStackCE/example-ios-apple-pay-playwright #4

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

MasatoMakino/threejs-interactive-object #692

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Build(deps): Bump basic-ftp from 5.2.0 to 5.2.2 in the npm_and_yarn group across 1 directory

mrjonstrong/website #425

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

VooDooNoir/Super-Voodoo #14

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

johnnolan/johnnolan.dev #548

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

hmcts/ia-aip-frontend #1464

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2

xixu-me/xread #47

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

opensearch-project/skills-eval #128

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /digitaltableteur-blog

PetriLahdelma/digitaltableteur #520

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

0xcaffebabe/note #541

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

centrica-engineering/muon #843

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2 in /tools/website-auditor

rkuskopf/studio-os #546

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

deps(npm): bump basic-ftp from 5.2.0 to 5.2.2

bordenet/RecipeArchive #213

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

deps: bump basic-ftp from 5.2.0 to 5.2.2

g-but/revampit #130

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /tech/node

stephanedenis/Panini-Research #12

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

koudjo-mvp/webapp #34

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

ACHultman/achultman-web #102

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /explorer

skycoin/skycoin #2843

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

cadegallen-prog/HD-ONECENT-GUIDE #195

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

PiwikPRO/react-native-piwik-pro-sdk #113

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /cla-backend

linuxfoundation/easycla #4990

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

devkoriel/home #13

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

MattIPv4/Personal-Site #62

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /e2e/min

help-me-mom/ng-mocks #13574

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

⬆️ Bump basic-ftp from 5.2.0 to 5.2.2

marocchino/validate-dependabot #826

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /public

JueK3y/Instagram-automated-commenting #58

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

scinote-eln/scinote-web #9373

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

code4recovery/12-step-meeting-list #1917

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

bdickason/bdickason.com #28

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

tavva/whatsapp-transcriber #5

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /backend

TrueMysterious/nginx-proxy-manager #172

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.1 to 5.2.2

lizadaly/windrift #363

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /workspaces/flux

miqdigital/community-plugins #900

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Build(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /services/oggo

contributte/juicy #6377

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

HiromiShikata/npm-cli-gh-cookie #218

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 843 (39.8%)

Merged 0 (0.0%)

Closed 1,274 (60.2%)

PR Types

Major 5 (0.2%)

Minor 1,427 (67.4%)

Patch 685 (32.4%)