npm/basic-ftp: high 8.2
basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands
Action: Upgrade basic-ftp to 5.2.2 or later.
npm i basic-ftp@5.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.2 | - |
Fixed versions
| 5.2.2 |
Sources
- osv: GHSA-6v7q-wjvx-w8wg
- https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-6v7q-wjvx-w8wg
- https://github.com/patrickjuchli/basic-ftp/commit/20327d35126e57e5fdbaae79a4b65222fbadc53c
- https://github.com/patrickjuchli/basic-ftp
- https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.2
published · modified · JSON