Mmastodon TechnologyCybersecurity first seen 14 h ago, last 14 h ago, peak #12
Basic-ftp faces multiple unpatched vulnerabilities
Original: Basic-ftp carries 4 CVEs with an avg CVSS of 8.18 and 75% left unpatched. Trust score C. Patch lag is the real risk here
The Node.js FTP library Basic-ftp has been assessed as carrying four known vulnerabilities with an average CVSS severity of 8.18, three-quarters of which remain unpatched. The package received a trust score of C, with patch lag flagged as the main risk for developers relying on it. Security observers are urging teams that use the library to review exposure and consider alternatives or mitigations.
Why now: New vulnerability analysis of a widely used open-source library highlights the risks of slow patching in the software supply chain.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/2951276