basic-ftp vulnerabilities

CVEs whose affected-version data names the basic-ftp package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102990High· 8.2PoC

yesterday

basic-ftp is an FTP client for Node.js

basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsing a directory listing because the RE_LINE expression in src/parseListUnix.ts b…

▾ Midnightpatrickjuchli · basic-ftpEPSS 0.51%via NVD