MAL-2025-35733 Malicious code in test-mlw2-macer-septa-hears-sails (npm)

The package test-mlw2-macer-septa-hears-sails was found to contain malicious code...

Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-38504

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-38504

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

Design/Logic Flaw

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

CVE-2023-38504 Sails DoS vulnerability for apps with sockets enabled

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

CVE-2023-38504

Sails (Node.js) CVE-2023-38504 affects apps before v1.5.7. An attacker could send a virtual request that crashes the node process, enabling a Denial of Service. The issue is fixed in v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client.

CVE-2023-38504 Sails DoS vulnerability for apps with sockets enabled

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

CVE-2023-38504 Sails DoS vulnerability for apps with sockets enabled

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

DoS vulnerability for apps with sockets enabled

Impact In Sails apps =v1.5.6, an attacker can send a virtual request that will cause the node process to crash. Patches This behavior was fixed in Sails v1.5.7 Workarounds Disable the sockets hook and remove the sails.io.js client References https://github.com/balderdashy/sails/pull/7287 Big than...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-38504 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2023-38504 Source advisory: OSV:GHSA-GPW9-FWM8-7RX7...

GHSA-GPW9-FWM8-7RX7 DoS vulnerability for apps with sockets enabled

Impact In Sails apps =v1.5.6, an attacker can send a virtual request that will cause the node process to crash. Patches This behavior was fixed in Sails v1.5.7 Workarounds Disable the sockets hook and remove the sails.io.js client References https://github.com/balderdashy/sails/pull/7287 Big than...

CVE-2023-38504: Uncaught Exception

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client...

PT-2023-26484 · Node.Js · Sails

Name of the Vulnerable Software and Affected Versions: Sails versions prior to 1.5.7 Description: Sails is a realtime MVC Framework for Node.js. An attacker can send a virtual request that will cause the node process to crash. Recommendations: For versions prior to 1.5.7, update to version 1.5.7 ...

Sails.js 安全漏洞

Sails.js is a Node.js-based web application framework from Sails, Inc. in the United States. A security vulnerability exists in Sails.js versions prior to 1.5.7, which originates in a Sails application, where an attacker can send a virtual request that causes the node process to crash...

Prototype Pollution

sails is vulnerable to prototype pollution. The function loadActionModules allows an attacker to modify attributes such as proto, constructor and prototype...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-44908 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-44908 Source advisory: OSV:GHSA-8V3J-JFG3-V3FV...

Sails.js 注入漏洞

Sails.js is a Node.js-based web application framework from Sails, Inc. Sails.js suffers from an injection vulnerability that originates in the loadActionModules function in controller/load-action-modules.js, which is susceptible to a prototype contamination vulnerability. The vulnerability affect...