7.5
Élevée
CVE-2026-41324 basic-ftp is an FTP client for Node.js
Description
basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote FTP server. A malicious or compromised server can send an extremely large or never-ending listing response to `Client.list()`, causing the client process to consume memory until it becomes unstable or crashes. Version 5.3.0 fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| basic-ftp 5.3 | premières → < 5.3.0 | 5.3.0 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de basic-ftp
Les 5 CVE de basic-ftp →
CVE-2026-102990
basic-ftp is an FTP client for Node.js
8.2
Élevée
CVE-2026-44240
basic-ftp is an FTP client for Node.js
7.5
Élevée
CVE-2026-39983
basic-ftp is an FTP client for Node.js
8.6
Élevée
CVE-2026-27699
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to…
9.1
Critique