`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,122 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
1,512 repositories

Unique Repos (30 days):
167 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated 2 days ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 26 days ago • updated 10 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 11 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 26 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 2 months ago • updated 6 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /app/controlroom_frontend

edtbl76/stud.io #25

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

janm-dev/rand #40

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

Fhwang0926/NotifyMe #6

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

BrowserStackCE/example-ios-apple-pay-playwright #3

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /apps/web

Prekzursil/Reframe #142

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 4 comments

build(deps-dev): Bump basic-ftp from 5.2.0 to 5.2.1

jonathan-vella/hack-ops #219

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

deltcrosx1024/projectmeridus #134

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /system/whatsapp_worker

Matiasxth/capability-os #11

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

cannaplan/Gaia-Commons-council-app-2.1 #56

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 3 comments

Bump the npm_and_yarn group across 2 directories with 2 updates

ethanolivertroy/grclanker #7

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

worldbank/guide-metadata-standards #11

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

opensearch-project/skills-eval #126

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

theboi/carousell-monitoring #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps): Bump basic-ftp from 5.2.0 to 5.2.1

yasuhirokudo/crossnote #39

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /crawler-agent-core

skyfire-xyz/skyfire-solutions-smart-news-crawler-demo #55

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

ar27111994/webhook-debugger-logger #27

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 3 comments

chore(deps-dev): Bump basic-ftp from 5.2.0 to 5.2.1

executiveusa/vallarta-voyage-explorer #30

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.1

arthrod/napi-rs #9

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

navikt/endringslogg #56

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

radius-project/dashboard #223

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.1

brianajiks123/bot-soldout-esb #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /front_end

Metaculus/metaculus #4601

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

RedHatProductSecurity/osim #768

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore: bump basic-ftp from 5.2.0 to 5.2.1

slamanna212/MatchExec #355

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

brunogasparetto/fluig-vscode-extension #24

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /unfurler

mdellison90-stack/mempool #61

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

Muhaddil/RSSWikiPageCreator #163

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): Bump basic-ftp from 5.2.0 to 5.2.1

BadgerOps/WOTSapp #123

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

maxwroc/battery-state-card #891

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

TheWaterBugCompany/WALTA #166

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

agentguard-ai/TealTiger-Playground #12

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

hmcts/appreg-frontend #805

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

zero-to-mastery/Animation-Nation #3362

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

openlayers/ol-mapbox-style #1447

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

liveblocks/n8n-nodes-liveblocks #3

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

cooperability/cooperability.com #216

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 3 comments

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

chrisguttandin/timed-audio-buffer-source-node-audio-worklet-processor #25

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory

ColRuDev/portfolio #19

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /test/output-integration/browser

contentful/contentful-management.js #2973

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /scripts/metrics-plotter in the npm_and_yarn group across 1 directory

hiero-ledger/solo #3947

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 9 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

Teolhyn/resume-pages #44

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

lilboards/lilboards #3080

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /packages/jut/skill/eval

edmundmiller/dotfiles #63

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

ehmicky/is-error-instance #25

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

deps(deps): bump basic-ftp from 5.2.0 to 5.2.1

misty-step/scry #311

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.1

scriptex/round-carousel-component #114

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.1

gocardless/woocommerce-gateway-gocardless #137

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 in /client

dataminelab/datareporter #727

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

BAU: Bump basic-ftp from 5.2.0 to 5.2.1

govuk-one-login/onboarding-product-page #883

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /tests/lighthouse

kyma-project/busola #4800

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 845 (39.9%)

Merged 0 (0.0%)

Closed 1,275 (60.1%)

PR Types

Major 5 (0.2%)

Minor 1,429 (67.4%)

Patch 686 (32.4%)