tocsin

Debian/node-send: medium 5.3

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Action: Upgrade node-send to 0.16.2-1 or later.

Affected

introducedfixedlast affected
00.16.2-1-

Fixed versions

0.16.2-1

Sources

published · modified · JSON