What’s Vulnerable › Products

patrickjuchli basic-ftp vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your patrickjuchli basic-ftp version is affected

Latest patrickjuchli basic-ftp vulnerabilities

• CVE-2026-102990 — basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking) (CVSS 8.2)
• CVE-2026-44240 — basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering (CVSS 7.5)
• CVE-2026-41324 — basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list() (CVSS 7.5)
• CVE-2026-39983 — FTP Command Injection via CRLF in basic-ftp (CVSS 8.6)
• CVE-2026-27699 — Basic FTP has Path Traversal Vulnerability in its downloadToDir() method (CVSS 9.8)