Skip to content
OpenAdvisories

Package · Debian

node-proxy-agents

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-39983 Public exploit

    FTP Command Injection via CRLF in basic-ftp

    basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such as cd(), remove(), rename(), uploadFrom(), downloadTo(), list(), and removeDir…

    patrickjuchli basic-ftp basic-ftp node-proxy-agents Debian Ubuntu npm