Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/sails@1.5.2
purl pkg:npm/sails@1.5.2
Next non-vulnerable version 1.5.7
Latest non-vulnerable version 1.5.7
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-hkee-9r97-jyhu
Aliases:
CVE-2023-38504
GHSA-gpw9-fwm8-7rx7
Uncaught Exception Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.
1.5.7
Affected by 0 other vulnerabilities.
VCID-pmc7-wajy-juf8
Aliases:
CVE-2021-44908
GHSA-8v3j-jfg3-v3fv
Prototype Pollution in sails SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules(). There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:59:08.426731+00:00 GitLab Importer Affected by VCID-hkee-9r97-jyhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/sails/CVE-2023-38504.yml 38.6.0
2026-06-05T21:21:08.529740+00:00 GHSA Importer Affected by VCID-pmc7-wajy-juf8 https://github.com/advisories/GHSA-8v3j-jfg3-v3fv 38.6.0