{"id":"EUVD-2017-0261","enisaUuid":"e611a8ad-b84d-3b75-85b1-b9505fc2938c","description":"The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.","datePublished":"Jan 23, 2017, 9:00:00 PM","dateUpdated":"Oct 8, 2026, 9:03:11 PM","baseScore":null,"references":"http://www.securityfocus.com/bid/96435\nhttps://nodesecurity.io/advisories/56\nhttp://www.openwall.com/lists/oss-security/2016/04/20/11\n","aliases":"CVE-2015-8859\nGHSA-jgqf-hwc5-hh37\n","assigner":"mitre","epss":4.7,"enisaIdProduct":[{"id":"76e94a2c-6b8e-30a3-a62f-8fa180849598","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"13ae63ce-b6d8-3a89-aee3-18e615d1b63a","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"9da792d1-a6d7-3e66-9f56-fc38d1bc5586","vulnerability":{"id":"CVE-2015-8859","description":"The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.","datePublished":"Jan 23, 2017, 9:00:00 PM","dateUpdated":"Oct 8, 2026, 9:03:11 PM","status":"PUBLISHED","baseScore":null,"references":"http://www.securityfocus.com/bid/96435\nhttps://nodesecurity.io/advisories/56\nhttp://www.openwall.com/lists/oss-security/2016/04/20/11\n","enisa_id":"EUVD-2017-0261\n","assigner":"mitre","epss":4.7,"dataProcessed":"Nov 9, 2026, 7:19:20 AM","vulnerabilityProduct":[{"id":"910919e2-2301-329e-9e7c-5d33ba4ec749","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"413e8387-fa25-38ec-b0f9-d3e0bb86be48","vendor":{"name":"n/a"}}]}},{"id":"b6f3da0e-6f1a-377a-b29e-d90e43a06a3c","vulnerability":{"id":"GHSA-jgqf-hwc5-hh37","description":"Root Path Disclosure in send","datePublished":"Oct 24, 2017, 6:33:36 PM","dateUpdated":"Sep 14, 2021, 7:42:25 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2015-8859\nhttps://github.com/pillarjs/send/pull/70\nhttps://github.com/pillarjs/send/commit/98a5b89982b38e79db684177cf94730ce7fc7aed\nhttps://github.com/expressjs/serve-static/blob/master/HISTORY.md#181--2015-01-20\nhttps://github.com/pillarjs/send\nhttps://web.archive.org/web/20200227192016/https://www.securityfocus.com/bid/96435\nhttp://www.openwall.com/lists/oss-security/2016/04/20/11\n","enisa_id":"EUVD-2017-0261\n","aliases":"GHSA-jgqf-hwc5-hh37\nCVE-2015-8859\n","epss":0.0,"dataProcessed":"Apr 26, 2026, 1:42:16 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}