npm CVE Archive

signalk-server CVE Vulnerabilities

All known CVEs affecting signalk-server. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-55591
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
Medium
CVE-2026-39320
Signal K Server has an Unauthenticated Regular Expression Denial of Service…
High
CVE-2026-34083
Signal K Server: OAuth Authorization Code Theft via Unvalidated Host Header in…
Medium
CVE-2026-33951
Signal K Server: Unauthenticated Source Priorities Manipulation
Medium
CVE-2026-33950
Signal K Server: Privilege Escalation by Admin Role Injection via…
Critical
CVE-2026-25228
SignalK Server has Path Traversal leading to information disclosure
Medium
CVE-2025-68620
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and…
Critical
CVE-2025-69203
Signal K Server Vulnerable to Access Request Spoofing
Medium
CVE-2025-68619
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
High
CVE-2025-68273
Signal K Server Vulnerable to Unauthenticated Information Disclosure via…
Medium
CVE-2025-68272
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request…
High
CVE-2025-66398
Signal K Server has Unauthenticated State Pollution leading to Remote Code…
Critical

Prioritize signalk-server vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo