Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

sailsjs CVEs

Beta · best-effort

5 CVEs tagged to vendor sailsjs — 2 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-38504

Published Jul 27, 2023

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-27262

Published Apr 12, 2022

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-44908

Published Mar 17, 2022

SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-21036

Published Jul 21, 2020

Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname i…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2016-10549

Published May 31, 2018

Sails is an MVC style framework for building realtime web applications. Version 0.12.7 and lower have an issue with the CORS configuration where the value of the origin header is…

CVSS 4.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1