send
1.2.1 · 15 Dec 2025MIT207M / weekRepositoryHomepagenpmAtom feed
Upgrading send From 0.4.2 to 1.2.1
53 releases in betweennotes for 6
1.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 3
- advisories fixed
- ?
- new
- 3+
- fixes
Counted from 6 of 53 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 3 advisories affecting 0.4.2
- Root Path Disclosure in sendmoderate · GHSA-jgqf-hwc5-hh37
- send vulnerable to template injection that can lead to XSSlow · GHSA-m6fv-jmcg-4jfg
- Directory Traversal in sendlow · GHSA-xwg4-93c6-3h42
Release by release
1.2.1nothing new or fixed in the note
- fixed
Remove obsolete dependency
destroy
- fixed
- fixed
Engines node@>=18
- fixed
Do not serve files when path ends with /
- fixed
0.4.3 – 1.0.050 releases, nothing new or fixed; 47 without a note
3 other lines we could not sort, mostly version bumps
- 1.2.1
Apply security best practices
- 1.2.0
Release 1.2.0
- 1.1.0
Remove link renderization in html while redirecting (#235)
30 internal lines (docs, tests, tooling) left out.