`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,118 Dependabot PRs

Latest PR:
about 19 hours ago

Unique Repositories:
1,510 repositories

Unique Repos (30 days):
165 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated 1 day ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 25 days ago • updated 9 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 10 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 25 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 1 month ago • updated 5 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump basic-ftp from 5.2.0 to 5.2.2

cyverse-de/sonora #674

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

mscrivo/wdio-ts-native-repro #10

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

chevyboys/Mizuchi #210

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

tvanlaerhoven/epex-client #40

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.1 to 5.2.2

the-blue-alliance/the-blue-alliance #9661

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

UK-Export-Finance/exip #3688

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2 in /db

metas-frsf/ceut-web #228

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

scriptex/atanas.info #3434

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

newrelic/docs-website #23705

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /libs/frontend in the npm_and_yarn group across 1 directory

app-dev-panel/app-dev-panel #181

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

gristlabs/grist-core #2261

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.2

gustavotsuji/gustavotsuji.github.io #52

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

stritti/jws-project-map #764

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

kennethclemmensen/kennethclemmensen.dk #43

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Husterknupp/lkg-halle #201

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

scriptex/react-round-carousel #357

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

starsandmanifolds/starsandmanifolds.xyz #150

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /addons/screenshot-tool

facebook/sapling #1279

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

Fatalito/modern-nextjs-directory-template #66

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

REL0AX/BRTESTv2 #111

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /backend

vikasgowdaja/vendor-trainer-training-engagement-management-system #12

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

pancakeswap/pancakeswap-ai #59

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

cubyfun-inc/vote-app #6

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

build(deps-dev): Bump basic-ftp from 5.2.0 to 5.2.2

jasperfordesq-ai/nexus-v1 #60

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

sudheer-ranga/aliexpress-product-scraper #74

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

redhat-developer/rhdh-cli #100

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

SharebookBR/sharebook-frontend #565

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

Dayopt/app #1041

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 in /docs

OpenNHP/opennhp #1476

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

raminr77/raminr77.github.io #81

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

KM-WebDev/amokstudio-frontend #74

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Erudika/para-client-js #31

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

ivanoats/wsg-check #117

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

build(deps): bump basic-ftp from 5.2.0 to 5.2.2

inveniosoftware/inveniosoftware.org #266

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

hajareshyam/pdf-creator-node #132

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

uewtwo/made-in-abyss-hiatus-chart #59

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): Bump basic-ftp from 5.2.0 to 5.2.2

cube-js/cube #10670

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /images/exporter-build

raineblog/mkdocs-docker #15

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

bayashi/mclocks #452

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

18F/analytics-reporter #1047

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Shinsina/Shinsina-Utilities #53

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

elliotblackburn/mdpdf #253

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.2

hktrpg/TG.line.Discord.Roll.Bot #953

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

Redocly/redocly-cli #2737

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.2

swaponline/MultiCurrencyWallet #5321

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

nvie/decoders #1310

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

AlvarocJesus/Buscador-de-menor-preco #10

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 in /e2e/a19

help-me-mom/ng-mocks #13557

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

theccalderon/saving-the-bar #15

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

nestjs/elasticsearch #1846

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 843 (39.8%)

Merged 0 (0.0%)

Closed 1,274 (60.2%)

PR Types

Major 5 (0.2%)

Minor 1,427 (67.4%)

Patch 685 (32.4%)