patrickjuchli basic-ftp

• CVE-2026-102990 High 8.2 basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking) 0.4%
• CVE-2026-44240 High 7.5 basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering 0.5%
• CVE-2026-41324 High 7.5 basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list() 0.3%
• CVE-2026-39983 High 8.6 FTP Command Injection via CRLF in basic-ftp 2.2%
• CVE-2026-27699 Critical 9.1 Basic FTP has Path Traversal Vulnerability in its downloadToDir() method 0.9%