Root Path Disclosure in send (GHSA-jgqf-hwc5-hh37)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2015-8859
Severity: MODERATE · CWE: CWE-200

Versions of `send` prior to 0.11.2 are affected by an information leakage vulnerability which may allow an attacker to enumerate paths on the server filesystem.



## Recommendation

Update to version 0.11.1 or later.

Affected packages:
package: ecosystem: npm
name: send
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.11.1