7.5
High
CVE-2026-41324 basic-ftp is an FTP client for Node.js
Description
basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote FTP server. A malicious or compromised server can send an extremely large or never-ending listing response to `Client.list()`, causing the client process to consume memory until it becomes unstable or crashes. Version 5.3.0 fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| basic-ftp 5.3 | earliest → < 5.3.0 | 5.3.0 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of basic-ftp
The 5 CVEs of basic-ftp →
CVE-2026-102990
basic-ftp is an FTP client for Node.js
8.2
High
CVE-2026-44240
basic-ftp is an FTP client for Node.js
7.5
High
CVE-2026-39983
basic-ftp is an FTP client for Node.js
8.6
High
CVE-2026-27699
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to…
9.1
Critical