Skip to content
OpenAdvisories

Package · npm

sails

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2023-38504

    Sails DoS vulnerability for apps with sockets enabled

    Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remo…

    balderdashy sails sails npm
  • Critical 9.8
    CVE-2021-44908

    Prototype Pollution in Sails.js

    SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().

    sails npm
  • High —
    CVE-2016-10549

    Sails before 0.12.7 vulnerable to Broken CORS

    Sails is an MVC style framework for building realtime web applications. Version 0.12.7 and lower have an issue with the CORS configuration where the value of the origin header is reflected as the value for the Access-Control-Allow-Origin header. This would al…

    HackerOne sails node module sails npm