CVE-2015-8859

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Date published : 2017-01-23

http://www.securityfocus.com/bid/96435

https://nodesecurity.io/advisories/56