CVE-2026-126345 | patrickjuchli basic-ftp up to 6.2.3 MLSD directory-listing parser src/parseListMLSD.ts Client.list improperly controlled sequential memory allocation

A vulnerability, which was classified as problematic, was found in patrickjuchli basic-ftp up to 6.2.3. This issue affects the function Client.list of the file src/parseListMLSD.ts of the component MLSD directory-listing parser. Such manipulation leads to improperly controlled sequential memory allocation.

This vulnerability is referenced as CVE-2026-126345. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More