Medium DLA-4224-1 1 CVE

node-send - security update

Published Jun 23, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	node-send	0.17.1-2+deb11u1

Vulnerabilities 1

Medium 5.0

CVE-2024-43799

send vulnerable to template injection that can lead to XSS

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.

pillarjs send thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Azure Linux Wolfi npm

Sep 10, 2024