Most recent entries from all

EUVD-2026-192018

fkie_cve-2023-38504

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.

GHSA-gpw9-fwm8-7rx7 — DoS vulnerability for apps with sockets enabled

Affected: npm: sails

### Impact In Sails apps <=v1.5.6, an attacker can send a virtual request that will cause the node process to crash.

### Patches This behavior was fixed in Sails [v1.5.7](https://github.com/balderdashy/sails/releases/tag/v1.5.7)

### Workarounds Disable the sockets hook and remove the `sails.io.js` client

### References https://github.com/balderdashy/sails/pull/7287

Big thanks to @ThomasRinsma at [Codean](https://www.linkedin.com/company/codeanio/)!

Most recent entries from all

EUVD-2026-192018

fkie_cve-2023-38504

GHSA-gpw9-fwm8-7rx7 — DoS vulnerability for apps with sockets enabled

gsd-2023-38504