CVE-2024-43799 — send directory traversal

A path-traversal bug in the `send` module — used by Express's static file server — could allow reading files outside the configured root under specific path configurations.