`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,122 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
1,512 repositories

Unique Repos (30 days):
167 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated 2 days ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 26 days ago • updated 9 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 10 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 26 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 2 months ago • updated 5 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

xixu-me/xread #45

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 3 updates

NostrGameEngine/nge-platforms #21

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /backend

StardustArch/ai-tutoring-platform #37

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /core

TKCen/sera #922

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

JanSzewczyk/portfolio #61

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 3 comments

chore(deps): Bump basic-ftp from 5.2.0 to 5.2.1

cacique-coder/quillcv #5

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

hamster1963/nezha-dash #306

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

deps: bump basic-ftp from 5.2.0 to 5.2.1

GraafG/consumentenbond-dl #4

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /image_scrape_code

cjvillar/tf-image-train-workbook #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /tests/e2e

redis/RedisInsight #5755

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

chore(deps): Bump basic-ftp from 5.2.0 to 5.2.1

hec8897/toy-monorepo #48

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

tavva/whatsapp-transcriber #4

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

JustinPaoletta/my_portfolio #256

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 5 comments

deps: bump basic-ftp from 5.2.0 to 5.2.1

seanyates76/Ez-Quiz-App #37

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /gutenberg in the npm_and_yarn group across 1 directory

charettep/wordpress-ai-genie-plugin #2

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

deps-dev(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

mattduff36/vostudiofinder #122

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

deps(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

nikolay-e/yay-tsa #175

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

peterfortuin/n8n-nodes-bunq #72

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

shaileshgola1987/cloud-backend #2

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.1

PetriLahdelma/digitaltableteur #519

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

ch-sagw/sagw #990

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

build(deps): Bump basic-ftp from 5.2.0 to 5.2.1 in /hackernews_scraper in the npm_and_yarn group across 1 directory

k-zehnder/gophersignal #612

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /e2e

nyasuto/uzura #11

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1 in the minor-and-patch-sec group across 1 directory

Libera-Chat/donations #25

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /e2e

vadym-shukurov/ProfitFlow-Demo #27

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

Planning-Inspectorate/applications-dco-portal #472

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /scraper

NFI-279/Veridion-Internship-Challenge #2

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

KM-WebDev/amokstudio-frontend #73

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

haliphax/narf #184

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1 in /DataImport.E2E.Tests in the npm_and_yarn group across 1 directory

Ed-Fi-Alliance-OSS/Ed-Fi-DataImport #152

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

candrikanich/recruiting-compass-web #166

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.1 in /api-proxy

weather-gov/weather.gov #2340

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /testing/grpcwebclient

connectrpc/conformance #1083

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

markwylde/workerbox #59

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

OpenRailAssociation/netzgrafik-editor-frontend #921

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

imsus/pi-extension-minimax-coding-plan-mcp #10

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

Djtony707/TITAN #29

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates

valle808/Humanese #62

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

aws-samples/sample-autonomous-cloud-coding-agents #9

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

BAU: Bump basic-ftp from 5.2.0 to 5.2.1 in /ui-automation-tests

govuk-one-login/onboarding-self-service-experience #1251

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

digital-codes/pa11y #3

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

laws-africa/peachjam #3131

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

navikt/tilleggsstonader-brev-sanity #135

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

massalabs/openclaw-gossip-plugin #22

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

Abhishek-kumarsingh/hireauto---ai-recruitment-system #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

ehmicky/set-error-props #25

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

bryanseah234/playsplendor #68

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

acm-uiuc/core #659

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps)(deps): bump basic-ftp from 5.2.0 to 5.2.1

Kushalitha/next-resume-pro #56

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

browserstack/codecept-js-playwright-browserstack #14

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 845 (39.9%)

Merged 0 (0.0%)

Closed 1,275 (60.1%)

PR Types

Major 5 (0.2%)

Minor 1,429 (67.4%)

Patch 686 (32.4%)