basic-ftp
6.2.3 · 9 Oct 2026MIT27.3M / weekRepositoryHomepagenpmAtom feed
Your version
6.2.3 is the newest release of 6.x.
In short
1 security1 changed
Security
Fixes 1 advisory that affected 6.2.0
- Highbasic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)GHSA-c475-qrg2-pj4r · 1 Oct 2026Fixed in 6.2.1
Release note
- security
Fixed: Protect against excessive CPU use when parsing a directory listing, fixes github.com/patrickjuchli/basic-ftp/security/adv….
Fixed: A transfer could time out right after a slow local source or destination stopped holding it up, before the server had a chance to continue.