Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/11/12 10:23 p.m.•11 views

basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF

Summary Client.login calls FTPContext.send from inside the control-socket data event handler. send throws on CR, LF or NUL, and nothing catches the throw. A password containing \r\n therefore raises an uncaught exception and terminates the whole Node.js process. It does not reject the returned...

5.9CVSS6.3AI score0.01672EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder