/CVE-2026-27699

CRITICALCVE-2026-27699npmCVSS 9.1

basic-ftp

Published

Description

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

Affected Versions

>=0

FIXED VERSIONS5.2.0

References

WEBhttps://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-5rq4-664w-9x2c ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-27699 WEBhttps://github.com/patrickjuchli/basic-ftp/commit/2a2a0e6514357b9eda07c2f8afbd3f04727a7cd9 PACKAGEhttps://github.com/patrickjuchli/basic-ftp WEBhttps://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.0

Using basic-ftp?

Scan your dependencies and detect this automatically on every PR.

Create free account