send
1.2.1 · 15 Dec 2025MIT207M / weekRepositoryHomepagenpmAtom feed
Upgrading send From 0.9.0 to 1.2.1
38 releases in betweennotes for 6
1.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- 3+
- fixes
Counted from 6 of 38 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 2 advisories affecting 0.9.0
- Root Path Disclosure in sendmoderate · GHSA-jgqf-hwc5-hh37
- send vulnerable to template injection that can lead to XSSlow · GHSA-m6fv-jmcg-4jfg
Release by release
1.2.1nothing new or fixed in the note
- fixed
Remove obsolete dependency
destroy
- fixed
- fixed
Engines node@>=18
- fixed
Do not serve files when path ends with /
- fixed
0.9.1 – 1.0.035 releases, nothing new or fixed; 32 without a note
3 other lines we could not sort, mostly version bumps
- 1.2.1
Apply security best practices
- 1.2.0
Release 1.2.0
- 1.1.0
Remove link renderization in html while redirecting (#235)
30 internal lines (docs, tests, tooling) left out.