Critical · 9.8 CVE-2021-44908 EUVD-2022-1385GHSA-8v3j-jfg3-v3fv

Prototype Pollution in Sails.js

Published Mar 17, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Package: sails Ecosystem: npm

Description

SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	sails	<= 1.5.2	—	GHSA-8v3j-jfg3-v3fv

References