10.0.2
Released on 2026-08-18
Fixed
- reject FTP commands carrying CR or LF to prevent command injection
An argument containing CR or LF ended the intended command line and let a
second command be smuggled onto the control channel. Every rendered command
is now validated before it is written to the wire, in the sync, tokio and
smol implementations alike, and rejected with an InvalidInput connection
error.As a consequence custom_command no longer accepts several commands joined by
CRLF in a single call.