https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:21:50.442121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-192018 EUVD-2026-192018 2026-10-09T09:21:50.522123+00:00 EUVD-2026-192018 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38504 fkie_cve-2023-38504 2026-10-09T09:21:50.522161+00:00

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.

 https://cve.radiocsirt.org/vuln/ghsa-gpw9-fwm8-7rx7 GHSA-gpw9-fwm8-7rx7 — DoS vulnerability for apps with sockets enabled 2026-10-09T09:21:50.522202+00:00

Affected: npm: sails

### Impact In Sails apps <=v1.5.6, an attacker can send a virtual request that will cause the node process to crash.

### Patches This behavior was fixed in Sails [v1.5.7](https://github.com/balderdashy/sails/releases/tag/v1.5.7)

### Workarounds Disable the sockets hook and remove the `sails.io.js` client

### References https://github.com/balderdashy/sails/pull/7287

Big thanks to @ThomasRinsma at [Codean](https://www.linkedin.com/company/codeanio/)!

 https://cve.radiocsirt.org/vuln/gsd-2023-38504 gsd-2023-38504 2026-10-09T09:21:50.522273+00:00 gsd-2023-38504