Description
The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.
Remediation
References
http://www.openwall.com/lists/oss-security/2016/04/20/11
http://www.securityfocus.com/bid/96435
https://nodesecurity.io/advisories/56
Related Vulnerabilities
CVE-2020-27219 Vulnerability in maven package org.eclipse.hawkbit:hawkbit-update-server
CVE-2020-2246 Vulnerability in maven package org.jenkins-ci.plugins:valgrind
CVE-2022-43441 Vulnerability in npm package sqlite3
CVE-2019-10341 Vulnerability in maven package io.jenkins.docker:docker-plugin
CVE-2022-2217 Vulnerability in maven package org.webjars.npm:parse-url