CVE-2023-38504
1 advisory.
npm/sails CVE-2023-38504: high 7.5
DoS vulnerability for apps with sockets enabled
Action: Upgrade sails to 1.5.7 or later.
npm i sails@1.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.7 | - |
Fixed versions
| 1.5.7 |
Sources
- osv: GHSA-gpw9-fwm8-7rx7
- https://github.com/balderdashy/sails/security/advisories/GHSA-gpw9-fwm8-7rx7
- https://nvd.nist.gov/vuln/detail/CVE-2023-38504
- https://github.com/balderdashy/sails/pull/7287
- https://github.com/balderdashy/sails/commit/4a023dc5095a4b30fdc8535f705ed34cd22d2f7d
- https://github.com/balderdashy/sails
- https://github.com/balderdashy/sails/releases/tag/v1.5.7
CVE-2023-38504 · published · modified · JSON