`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,122 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
1,512 repositories

Unique Repos (30 days):
167 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated 2 days ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 26 days ago • updated 10 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 11 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 26 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 2 months ago • updated 6 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Open )

RSS Feed Clear filter

Bump the npm_and_yarn group across 1 directory with 21 updates

EmilynnJ/twilio-video-app-react #1

5.0.5 → 5.3.1 Minor PR

Open 2 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 16 directories with 18 updates

ahump20/socket.io #30

5.0.5 → 5.3.1 Minor PR

Open 4 days ago 2 comments

chore(deps): bump basic-ftp from 5.1.0 to 5.3.1 in /tools/ultra-agent-audit

njrini99-code/helmv3 #184

5.1.0 → 5.3.1 Minor PR

Open 4 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

ali963git/keycloak-nodejs-connect #11

5.0.5 → 5.3.1 Minor PR

Open 5 days ago 3 comments

Bump the npm_and_yarn group across 22 directories with 10 updates

Hawthorne001/react #412

5.0.5 → 5.3.1 Minor PR

Open 7 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 13 updates

HarleyCoops/ai #1

5.0.5 → 5.3.1 Minor PR

Open 9 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

GlacierEQ/langgraphjs #10

5.0.5 → 5.3.1 Minor PR

Open 9 days ago 4 comments

Bump the npm_and_yarn group across 1 directory with 5 updates

fchastanet/my-documents #23

5.2.0 → 5.3.1 Minor PR

Open 9 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.0.5 to 5.3.1

FreeForCharity/FFC-EX-southamptonfriends.org #52

5.0.5 → 5.3.1 Minor PR

Open 9 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.0.5 to 5.3.1

FreeForCharity/FFC-EX-legioninthewoods.org #62

5.0.5 → 5.3.1 Minor PR

Open 9 days ago 2 comments

npm(deps-dev): bump basic-ftp from 5.2.0 to 5.3.1

FreeForCharity/FFC-EX-bucktownbullsbaseball.org #42

5.2.0 → 5.3.1 Minor PR

Open 10 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.2.0 to 5.3.1

FreeForCharity/FFC-EX-browncanyonranch.org #36

5.2.0 → 5.3.1 Minor PR

Open 10 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.0.5 to 5.3.1

FreeForCharity/FFC-EX-clarasbridge.org #22

5.0.5 → 5.3.1 Minor PR

Open 10 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.2.0 to 5.3.1

FreeForCharity/FFC-EX-rebirthsdc.org #20

5.2.0 → 5.3.1 Minor PR

Open 10 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.2.0 to 5.3.1

FreeForCharity/FFC-EX-coronadonationalforestheritagesociety.org #39

5.2.0 → 5.3.1 Minor PR

Open 10 days ago 1 comment

npm(deps-dev): bump basic-ftp from 5.0.5 to 5.3.1

FreeForCharity/FFC-EX-freedomrisingusa.org #99

5.0.5 → 5.3.1 Minor PR

Open 10 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 11 updates

cline/cline #11006

5.1.0 → 5.3.1 Minor PR

Open 10 days ago 3 comments

Bump the npm_and_yarn group across 11 directories with 17 updates

HarleyCoops/joplin #17

5.0.3 → 5.3.1 Minor PR

Open 10 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 11 updates

Dargon789/sequence.js #588

5.0.5 → 5.3.1 Minor PR

Open 11 days ago 5 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 21 updates

adrianwedd/hermes-agent #9

5.2.2 → 5.3.1 Minor PR

Open 13 days ago 1 comment

Chore(deps): Bump the npm_and_yarn group across 7 directories with 9 updates

whitphx/stlite #2040

5.2.0 → 5.3.1 Minor PR

Open 13 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 26 updates

moshehbenavraham/crocbot #16

5.1.0 → 5.3.1 Minor PR

Open 13 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

loveyou001/openclaw #7

5.1.0 → 5.3.1 Minor PR

Open 13 days ago 4 comments

build(deps): bump the npm_and_yarn group across 16 directories with 19 updates

hashim21223445/angular #307

5.0.5 → 5.3.1 Minor PR

Open 14 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 13 directories with 13 updates

loveyou001/genkit #64

5.2.0 → 5.3.1 Minor PR

Open 14 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 8 updates

rubenvitt/bluelight-hub #765

5.3.0 → 5.3.1 Patch PR

Open 14 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

Enflame-Media/Magic-Agent #188

5.1.0 → 5.3.1 Minor PR

Open 15 days ago 3 comments

build(deps): bump basic-ftp from 5.1.0 to 5.3.1 in the npm_and_yarn group across 1 directory

max-ostapenko/puppeteer-automations #22

5.1.0 → 5.3.1 Minor PR

Open 15 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 7 updates

nilhemdot/openwolf #1

5.2.0 → 5.3.1 Minor PR

Open 15 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 20 updates

dporkka/open-assistant #9

5.1.0 → 5.3.1 Minor PR

Open 15 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 12 directories with 10 updates

balajirajput96/openai-node #44

5.0.5 → 5.3.1 Minor PR

Open 16 days ago 1 comment

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

langchain-ai/langgraphjs #2398

5.3.0 → 5.3.1 Patch PR

Open 17 days ago 2 comments

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /dynamic-plugins

redhat-developer/rhdh #4823

5.3.0 → 5.3.1 Patch PR

Open 17 days ago 4 comments

Bump the npm_and_yarn group across 1 directory with 14 updates

stupidkubik/kanban-board-app #10

5.2.0 → 5.3.1 Minor PR

Open 17 days ago 1 comment

Bump basic-ftp from 5.0.5 to 5.3.1

jjimenezshaw/Leaflet.Control.Layers.Tree #100

5.0.5 → 5.3.1 Minor PR

Open 17 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

GlacierEQ/stagehand #12

5.0.5 → 5.3.1 Minor PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

dporkka/open-assistant #8

5.1.0 → 5.3.1 Minor PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 19 updates

noheton/shepard #1124

5.2.0 → 5.3.1 Minor PR

Open 18 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 18 updates

alialobidm/lodestar #6

5.0.3 → 5.3.1 Minor PR

Open 19 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 11 updates

GlacierEQ/browser-operator-core #5

5.2.0 → 5.3.1 Minor PR

Open 19 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

lwhite702/Klutr_Primary #136

5.2.0 → 5.3.1 Minor PR

Open 19 days ago 3 comments

Bump the npm_and_yarn group across 3 directories with 14 updates

GlacierEQ/plate #34

5.0.5 → 5.3.1 Minor PR

Open 20 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 7 updates

UniversalStandards/activepieces #105

5.0.5 → 5.3.1 Minor PR

Open 20 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 20 updates

vinnub143/QuarterBack_BackStage_Sec_Testing #45

5.0.3 → 5.3.1 Minor PR

Open 20 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 10 updates

UniversalStandards/activepieces #103

5.0.5 → 5.3.1 Minor PR

Open 20 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 21 updates

ahump20/socket.io #26

5.0.5 → 5.3.1 Minor PR

Open 21 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 2 updates

Harqer/KYZO #8

5.3.0 → 5.3.1 Patch PR

Open 21 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 16 updates

GlacierEQ/plate #32

5.0.5 → 5.3.1 Minor PR

Open 21 days ago 8 comments

Bump the npm_and_yarn group across 7 directories with 12 updates

joe10832/next.js #16

5.0.5 → 5.3.1 Minor PR

Open 21 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 22 updates

valle808/Humanese #86

5.3.0 → 5.3.1 Patch PR

Open 21 days ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 845 (39.9%)

Merged 0 (0.0%)

Closed 1,275 (60.1%)

PR Types

Major 5 (0.2%)

Minor 1,429 (67.4%)

Patch 686 (32.4%)