Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-44908
9.8
CRITICALCVSS v3
Published
March 17, 2022
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().
sails
NPMAPI-driven framework for building realtime apps, using MVC conventions (based on Express and Socket.io)
NPMAPI-driven framework for building realtime apps, using MVC conventions (based on Express and Socket.io)<= 1.4.0, <= 1.5.2NVD
GitHub