basic-ftp
6.2.3 · 9 Oct 2026MIT27.3M / weekRepositoryHomepagenpmAtom feed
Your version
5.3.1
28 Apr 2026Security
Fixes 1 advisory that affected 5.3.0
- Highbasic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response bufferingGHSA-rpmf-866q-6p89 · 6 May 2026Fixed in 5.3.1
1 advisory affects 5.3.1; 6.2.1 fixes them
- Highbasic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)GHSA-c475-qrg2-pj4r · 1 Oct 2026Fixed in 6.2.1
Release note
No note was found for 5.3.1 on GitHub or in the repository's changelog.