Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

patrickjuchli vulnerabilities

7 published CVEs name patrickjuchli among the affected products.

Newest CVEs

  • CVE-2026-126346

    basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF

    patrickjuchli · basic-ftp

    Medium5.9
  • CVE-2026-126345

    basic-ftp: Uncaught TypeError in MLSD directory-listing parser via __proto__ fact name causes DoS in Client.list()

    patrickjuchli · basic-ftp

    Medium5.3
  • CVE-2026-102990

    basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)

    patrickjuchli · basic-ftp

    High8.2
  • CVE-2026-44240

    basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

    patrickjuchli · basic-ftp

    High7.5
  • CVE-2026-41324

    basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

    patrickjuchli · basic-ftp

    High7.5
  • CVE-2026-39983

    FTP Command Injection via CRLF in basic-ftp

    patrickjuchli · basic-ftp

    High8.6
  • CVE-2026-27699

    Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

    patrickjuchli · basic-ftp

    Critical9.1