patrickjuchli basic-ftp vulnerabilities
7 published CVEs name patrickjuchli basic-ftp among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126346
basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF
patrickjuchli · basic-ftp
Medium5.9 - CVE-2026-126345
basic-ftp: Uncaught TypeError in MLSD directory-listing parser via __proto__ fact name causes DoS in Client.list()
patrickjuchli · basic-ftp
Medium5.3 - CVE-2026-102990
basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
patrickjuchli · basic-ftp
High8.2 - CVE-2026-44240
basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering
patrickjuchli · basic-ftp
High7.5 - CVE-2026-41324
basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()
patrickjuchli · basic-ftp
High7.5 - CVE-2026-39983
FTP Command Injection via CRLF in basic-ftp
patrickjuchli · basic-ftp
High8.6 - CVE-2026-27699
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
patrickjuchli · basic-ftp
Critical9.1