npm package report

Is sails safe?

4 known vulnerabilities, worst severity CRITICAL.

cvss

9.0

how bad it is if exploited, out of 10

epss

1.8%

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-8v3j-jfg3-v3fv, the advisory selected below

// advisories

GHSA-8v3j-jfg3-v3fv

CRITICALCVE-2021-44908

Sails.js <= 1.5.2 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules(). A [patch](https://github.com/balderdashy/sails/commit/7c5379a656bb305c958df1dcc2b51a9668830358) is available in the master branch of Sails.js's GItHub repository.

Affected: <= 1.5.2
Fixed in: not stated
Weakness: CWE-1321
Published: 2022-03-18
Source: github

GHSA NVD MITRE reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.

Checked 2026-09-22 at 02:34 UTC. The most recent advisory here was published 2023-07-27. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is sails safe? npm package security report | CyberXYZ