basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF

Summary Client.login calls FTPContext.send from inside the control-socket data event handler. send throws on CR, LF or NUL, and nothing catches the throw. A password containing \r\n therefore raises an uncaught exception and terminates the whole Node.js process. It does not reject the returned...

PT-2026-146066

Summary Client.login calls FTPContext.send from inside the control-socket data event handler. send throws on CR, LF or NUL, and nothing catches the throw. A password containing r therefore raises an uncaught exception and terminates the whole Node.js process. It does not reject the returned...