patrickjuchli/basic-ftp Security Advisories | GitStock

high2026-10-01

basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)

GHSA-c475-qrg2-pj4r · CVE-2026-102990

high2026-05-06

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 · CVE-2026-44240

high2026-04-16

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr · CVE-2026-41324

high2026-04-10

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg

high2026-04-08

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q · CVE-2026-39983

critical2026-02-25

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c · CVE-2026-27699