Debian/node-proxy-agents: high 8.6
basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such as cd(), remove(),
Action: Upgrade node-proxy-agents to 0~2025070717+~cs15.3.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0~2025070717+~cs15.3.7-1 |
Sources
- osv: DEBIAN-CVE-2026-39983#Debian:14/node-proxy-agents
- https://security-tracker.debian.org/tracker/CVE-2026-39983
published · modified · JSON