@signalk/resources-provider vulnerabilities (npm)

1 vulnerability.

• @signalk/resources-provider npm Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution CVE-2026-123807 Fix available 9.8 CriticalOctober 30, 2026