CVE-2021-44908

CRITICAL

Sails.js <=1.4.0 - Prototype Pollution via loadActionModules()

Title source: llm

SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules().

Core 3

Core References

Broken Link x_refsource_misc

Third Party Advisory x_refsource_misc

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0180

EPSS Percentile 75.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-1321

Status published

Products (2)

npm/sails 0npm

sailsjs/sails < 1.4.0

Published Mar 17, 2022

Tracked Since Feb 18, 2026