CVE-2018-21036: Sailsjs Sails

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.

Affected products

• Sailsjs Sails: before 1.0.0-46 (fixed in 1.0.0-46)

Published 2020-07-21. Last modified 2026-06-17.