Basic Ftp
1 CVEs
product
Monthly
Path traversal in basic-ftp Node.js FTP client library before 5.2.0 allows malicious FTP servers to write files outside the intended download directory. PoC and patch available.
Node.js
Path Traversal
Basic Ftp
Redhat
Suse
NVD
GitHub
CVSS 3.1
9.1
EPSS
0.1%
CVE-2026-27699
EPSS 0%
CVSS 9.1
CRITICAL
POC
PATCH
Act Now
Path traversal in basic-ftp Node.js FTP client library before 5.2.0 allows malicious FTP servers to write files outside the intended download directory. PoC and patch available.
Node.js
Path Traversal
Basic Ftp
+2
NVD
GitHub