Publish a new release with send >= 0.19.0; CVE-2024-43799

[sdavids]

$ mkdir /tmp/test && cd "$_"
$ npm i --save-dev [email protected]
$ npm audit
# npm audit report

send  <0.19.0
Severity: moderate
send vulnerable to template injection that can lead to XSS - https://github.com/advisories/GHSA-m6fv-jmcg-4jfg
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/send
  browser-sync  >=2.12.1
  Depends on vulnerable versions of send
  Depends on vulnerable versions of serve-static
  node_modules/browser-sync
  serve-static  <=1.16.0
  Depends on vulnerable versions of send
  node_modules/serve-static


3 moderate severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

[max-holland]

+1

[yokoishioka]

I just submitted a PR for this and to resolve the one for sever-static as well: #2087

[rmch91]

+1

[shakyShane]

I'll sort this later today, thanks :)