Every CVE whose affected-product data names Send Project Send, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2015-8859 — CVSS 5.3 (medium): The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.
CVE-2024-43799 — CVSS 5.0 (medium): Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect()…