signalk-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-55591Mediumsignalk-server: Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints CVE-2026-41893Highsignalk-server: Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)CVE-2026-39320Highsignalk-server: Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths CVE-2026-34083Mediumsignalk-server: Signal K Server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow CVE-2026-33951Mediumsignalk-server: Signal K Server: Unauthenticated Source Priorities Manipulation CVE-2026-33950Criticalsignalk-server: Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity CVE-2026-35038Lowsignalk-server: Signal K Server: Arbitrary Prototype Read via `from` Field Bypass CVE-2026-25228Mediumsignalk-server: SignalK Server has Path Traversal leading to information disclosure CVE-2025-68620Criticalsignalk-server: Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling CVE-2025-69203Mediumsignalk-server: Signal K Server Vulnerable to Access Request Spoofing CVE-2025-68619Highsignalk-server: Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package CVE-2025-68273Mediumsignalk-server: Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints CVE-2025-68272Highsignalk-server: Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding CVE-2025-66398Criticalsignalk-server: Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo