| Package | Affected versions | Patched versions |
|---|---|---|
| sails | < 1.0.0-46 | 1.0.0-46 |
| sails-hook-sockets | < 1.5.5 | 1.5.5 |
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free