Sailsjs: >> Sails >> 1.2.0-1 Security Vulnerabilities
Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-07-27
SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().
CVSS Score
9.8
EPSS Score
0.004
Published
2022-03-17