Send is a library for streaming files from the file system as an http response. It supports partial responses (Ranges), conditional-GET negotiation, high test coverage, and granular events which may be leveraged to take appropriate actions in your application or framework.
Affected versions of this package are vulnerable to a Root Path Disclosure.
send to version 0.11.1 or higher.
If a direct dependency update is not possible, use snyk wizard to patch this vulnerability.
Snyk patch available for versions:
- <0.11.1 >=0.9.0