TI-2023-19884 CVE-2023-38504 · GHSA-gpw9-fwm8-7rx7
Sails DoS vulnerability for apps with sockets enabled
Priority MEDIUM 41
Sails is a realtime MVC Framework for Node.js.
Vulnerabilities
4 records
TI-2021-20324 CVE-2021-44908 · GHSA-8v3j-jfg3-v3fv
SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via…
Priority MEDIUM 46
SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().
TI-2018-14998 CVE-2018-21036 · GHSA-f7f4-hqp2-7prc
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single…
Priority LOW 36
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
TI-2016-08590 CVE-2016-10549 · GHSA-qmv4-jgp7-mf68
Improper access control in HackerOne sails node module
Priority LOW 21
Sails is an MVC style framework for building realtime web applications.