CVE-2026-102990
1 advisory.
npm/basic-ftp CVE-2026-102990: high, EPSS 0.37%
basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
Action: Upgrade basic-ftp to 6.2.1 or later.
npm i basic-ftp@6.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2.1 | - |
Fixed versions
| 6.2.1 |
Sources
- osv: GHSA-c475-qrg2-pj4r
- https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-c475-qrg2-pj4r
- https://nvd.nist.gov/vuln/detail/CVE-2026-102990
- https://github.com/patrickjuchli/basic-ftp/commit/d0d9e07c56e519587bb50532ac6eadbb0cb0cfe9
- https://github.com/patrickjuchli/basic-ftp
- https://github.com/patrickjuchli/basic-ftp/releases/tag/v6.2.1
CVE-2026-102990 · published · modified · JSON