Skip to content
OpenAdvisories

Package · Debian

node-send

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    CVE-2014-6394

    Directory Traversal in send

    visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" direc…

    send node-send node-send Debian Ubuntu npm