`send`

Ecosystem:
npm

Package URL:
pkg:npm/send

Total PRs:
2,858 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
2,484 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

send vulnerable to template injection that can lead to XSS

GHSA-m6fv-jmcg-4jfg CVE-2024-43799 LOW published over 1 year ago • updated 16 days ago

### Impact passing untrusted user input - even after sanitizing it - to `SendStream.redirect()` may execute untrusted code ### Patches this issu...

Root Path Disclosure in send

GHSA-jgqf-hwc5-hh37 CVE-2015-8859 MODERATE published over 8 years ago • updated about 1 month ago

Versions of `send` prior to 0.11.2 are affected by an information leakage vulnerability which may allow an attacker to enumerate paths on the serve...

Directory Traversal in send

GHSA-xwg4-93c6-3h42 CVE-2014-6394 LOW published over 8 years ago • updated about 6 hours ago

Versions 0.8.3 and earlier of `send` are affected by a directory traversal vulnerability. When relying on the root option to restrict file access i...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the npm group across 1 directory with 37 updates

ghjm/connectopus #1121

1.2.0 → 1.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump the npm group across 1 directory with 29 updates

ghjm/connectopus #1098

1.2.0 → 1.2.1 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 14 updates

Bubberstation/Shiptest #5

0.17.1 → 0.17.2 Patch PR

Closed 3 months ago 1 comment

deps(deps): bump the patch-updates group across 1 directory with 32 updates

mmarquet/strava-running-bot #74

1.2.0 → 1.2.1 Patch PR

Open 4 months ago 2 comments

Bump the production-dependencies group across 1 directory with 12 updates

vishalpatel2890/td-mcp-modified #32

1.2.0 → 1.2.1 Patch PR

Open 4 months ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 39 updates

slamb2k/DevFlow #94

1.2.0 → 1.2.1 Patch PR

Open 4 months ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 38 updates

slamb2k/DevFlow #92

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

Bump the root-minor-and-patch group across 1 directory with 74 updates

aobaharuki2005/Electronics-eCommerce-Shop-With-Admin-Dashboard-NextJS-NodeJS #11

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

Bump the root-minor-and-patch group with 80 updates

aobaharuki2005/Electronics-eCommerce-Shop-With-Admin-Dashboard-NextJS-NodeJS #3

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

Bump the root-minor-and-patch group across 1 directory with 74 updates

aobaharuki2005/ecommerce-shop-fork #11

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 3 comments

Bump the root-minor-and-patch group with 73 updates

aobaharuki2005/ecommerce-shop-fork #3

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 4 comments

root(deps): bump the root-minor-and-patch group with 79 updates

baotg235019-soict/electronic-ecommerce-forkv1 #7

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

root(deps): bump the root-minor-and-patch group with 79 updates

aobaharuki2005/ecommerce-shop-OFFICIALv0 #40

1.2.0 → 1.2.1 Patch PR

Closed 5 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 93 updates

GreySole/Spooder #57

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

fix(deps): bump the minor-patch-updates group across 1 directory with 56 updates

Cognigy/Cognigy-CLI #398

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 19 updates

BenisSula/saas-school-mgmt-system-new #46

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

Bump the js-production-dependencies group across 1 directory with 27 updates

texpert/rails_6_rss_reader #5393

0.19.1 → 0.19.2 Patch PR

Closed 5 months ago 1 comment

Bump the js-production-dependencies group across 1 directory with 25 updates

texpert/rails_6_rss_reader #5384

0.19.1 → 0.19.2 Patch PR

Closed 5 months ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 34 updates

slamb2k/DevFlow #88

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

Bump the js-production-dependencies group across 1 directory with 26 updates

texpert/rails_6_rss_reader #5379

0.19.1 → 0.19.2 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the prod group across 1 directory with 3 updates

mdn/yari #13595

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 8 comments

fix(deps): bump the minor-patch-updates group across 1 directory with 51 updates

Cognigy/Cognigy-CLI #389

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

deps(deps): bump the minor-and-patch group across 1 directory with 23 updates

skoops/bskyfirehose #14

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the npm-minor-patch group across 1 directory with 90 updates

dfh3913/VoiceHub-749b4 #3

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 2 comments

Bump the js-production-dependencies group across 1 directory with 24 updates

texpert/rails_6_rss_reader #5363

0.19.1 → 0.19.2 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump send from 1.2.0 to 1.2.1

erikraft/Drop #155

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 3 comments

chore(deps): Bump the production-dependencies group across 1 directory with 4 updates

haggistech/doc-system #30

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

chore(deps):(deps): bump the production-dependencies group across 1 directory with 4 updates

Lullabot/lullabot-slackbot #211

1.2.0 → 1.2.1 Patch PR

Closed 5 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 19 updates

skoops/bskyfirehose #13

1.2.0 → 1.2.1 Patch PR

Closed 5 months ago 2 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 32 updates

slamb2k/DevFlow #85

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

fix(deps): bump the minor-patch-updates group across 1 directory with 52 updates

Cognigy/Cognigy-CLI #386

1.2.0 → 1.2.1 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 16 updates

BenisSula/saas-school-mgmt-system-new #37

1.2.0 → 1.2.1 Patch PR

Closed 5 months ago 2 comments

deps(deps): bump send from 1.2.0 to 1.2.1

egarcia74/warp-sql-server-mcp #315

1.2.0 → 1.2.1 Patch PR

Open 6 months ago 18 comments

Bump the npm_and_yarn group across 3 directories with 11 updates

Bubberstation/Shiptest #4

0.17.1 → 0.17.2 Patch PR

Closed 6 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

CeladonSS13/Shiptest #2318

0.17.1 → 0.17.2 Patch PR

Closed 8 months ago 1 comment

Build(deps): Bump the npm_and_yarn group across 4 directories with 8 updates

CeladonSS13/Shiptest #2231

0.17.1 → 0.17.2 Patch PR

Closed 9 months ago

Build(deps): Bump the npm_and_yarn group across 4 directories with 7 updates

CeladonSS13/Shiptest #2143

0.17.1 → 0.17.2 Patch PR

Open 9 months ago

Bump the npm_and_yarn group across 4 directories with 7 updates

CeladonSS13/Shiptest #1966

0.17.1 → 0.17.2 Patch PR

Closed 10 months ago

Bump the npm_and_yarn group across 3 directories with 4 updates

CeladonSS13/Shiptest #1734

0.17.1 → 0.17.2 Patch PR

Closed about 1 year ago 1 comment

Package Details

Name:	`send`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/send`
JSON API:	View JSON

Security Advisories

3

Active advisories

MODERATE 1

LOW 2

View All npm Advisories

Package Information

Description:

Better streaming static file server with Range and conditional-GET support

Repository:	https://github.com/pillarjs/send
Homepage:	https://github.com/pillarjs/send#readme
Latest Release:	`1.2.0` about 1 year ago
Dependent Repos:	4,993,661
Dependent Packages:	2,106
Downloads:	205,931,748
Ranking:	Top 0.0003% by dependent repos Top 0.0097% by downloads Top 0.0376% by dependent pkgs

PR Status

Open 1,455 (50.9%)

Merged 301 (10.5%)

Closed 870 (30.4%)

PR Types

Major 80 (2.8%)

Minor 2,440 (85.4%)

Patch 39 (1.4%)

Removal 14 (0.5%)