basic-ftp
6.2.3 · 9 Oct 2026MIT27.3M / weekRepositoryHomepagenpmAtom feed
Upgrading basic-ftp from 5.1.0 to 5.2.0
1 release in betweenevery note read
- 0
- changes to make
- 1
- advisory fixed
- 0
- new
- 0
- fixes
Security
5 advisories still affect 5.2.0
- basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commandshigh · GHSA-6v7q-wjvx-w8wg
- basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)high · GHSA-c475-qrg2-pj4r
- basic-ftp has FTP Command Injection via CRLFhigh · GHSA-chqc-8p9q-pq6q
Upgrading to 6.2.1 clears them.
Fixes 1 advisory affecting 5.1.0
- Basic FTP has Path Traversal Vulnerability in its downloadToDir() methodcritical · GHSA-5rq4-664w-9x2c
1 other line we could not sort, mostly version bumps
- 5.2.0
Changed: Skip files with invalid name in downloadToDir.