send

1.2.1 · 15 Dec 2025MIT207M / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	1.2.1	No known advisory
	0.19.2	No known advisory
	0.18.0	38 open advisories, worst moderate · last release Mar 2022, no longer updated

Moderate
Root Path Disclosure in sendGHSA-jgqf-hwc5-hh37 · 24 Oct 2017
fixed in 0.11.1
Low
send vulnerable to template injection that can lead to XSSGHSA-m6fv-jmcg-4jfg · 10 Sep 2024
Low
Directory Traversal in sendGHSA-xwg4-93c6-3h42 · 24 Oct 2017
fixed in 0.8.4

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.