---
title: "send 1.2.1"
description: "Latest published version of send is 1.2.1, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/send
lang: en
---

[Packages](https://inlinr.com/packages)

# send

1.2.1 · 15 Dec 2025 MIT 207M / week [Repository](https://github.com/pillarjs/send) [Homepage](https://github.com/pillarjs/send#readme) [npm](https://www.npmjs.com/package/send) [Atom feed](https://inlinr.com/packages/feed/send)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/send/upgrade)

LineNewestSecurity

- 1.x 1.2.1 No known advisory Latest line
- 0.18.x and older 0.19.2 38 open advisories, worst moderate  · last release Mar 2022, no longer updated [To 1.2.1](https://inlinr.com/packages/send/upgrade/0.19.2-1.2.1)

## Latest releases

[All 67 releases](https://inlinr.com/packages/send/releases)

1. 1.x · latest line
2. ### [1.2.1](https://inlinr.com/packages/send/releases/1.2.1 "Open this release") [](https://github.com/pillarjs/send/releases/tag/1.2.1 "Read this release where it was published")  
15 Dec 2025

  - Apply security best practices
3. ### [1.2.0](https://inlinr.com/packages/send/releases/1.2.0 "Open this release") [](https://github.com/pillarjs/send/releases/tag/1.2.0 "Read this release where it was published")  
27 Mar 2025

  - Remove obsolete dependency `destroy`
4. ### [1.1.0](https://inlinr.com/packages/send/releases/1.1.0 "Open this release") [](https://github.com/pillarjs/send/releases/tag/1.1.0 "Read this release where it was published")  
10 Sep 2024

  - Remove link renderization in html while redirecting ([#235](https://github.com/pillarjs/send/pull/235 "https://github.com/pillarjs/send/pull/235"))
  - Engines node@>=18
  - Do not serve files when path ends with /

Dependency tracking · free for 3 projects

## Know when your own dependencies move

This page watches send. inlinr reads your package.json and keeps the same watch on every dependency you declare, then tells you only what needs you.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[Details](https://inlinr.com/packages/send/security)

- [Root Path Disclosure in send](https://inlinr.com/advisories/GHSA-jgqf-hwc5-hh37) Moderate · fixed in 0.11.1
- [send vulnerable to template injection that can lead to XSS](https://inlinr.com/advisories/GHSA-m6fv-jmcg-4jfg) Low ·
- [Directory Traversal in send](https://inlinr.com/advisories/GHSA-xwg4-93c6-3h42) Low · fixed in 0.8.4

## Health

[Details](https://inlinr.com/packages/send/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.