CVE-2015-8859 Node.js Send Module Root Path Disclosure Vulnerability

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications.

Node.js is exposed to a root path disclosure vulnerability in send Module. Affected Products:
Send module prior to 0.11.1

Successful exploitation allows remote, unauthenticated attackers to gain access to sensitive information on a targeted system.

Upgrade to send version 0.11.1 or greater.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

NodeJS Send (Send)