signalk-server vulnerabilities (npm)
16 vulnerabilities.
-
signalk-servernpm Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution 9.8 Critical -
signalk-servernpm Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon 2.3 Low -
signalk-servernpm Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints 5.8 Medium -
signalk-servernpm Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force) 8.7 High -
signalk-servernpm Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths 7.5 High -
signalk-servernpm signalk-server: Arbitrary Prototype Read via `from` Field Bypass 2.1 Low -
signalk-servernpm signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow 6.1 Medium -
signalk-servernpm signalk-server: Unauthenticated Source Priorities Manipulation 6.9 Medium -
signalk-servernpm signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity 9.4 Critical -
signalk-servernpm SignalK Server has Path Traversal leading to information disclosure 5.0 Medium -
signalk-servernpm Signal K Server Vulnerable to Access Request Spoofing 6.3 Medium -
signalk-servernpm Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package 7.3 High -
signalk-servernpm Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling 9.1 Critical -
signalk-servernpm Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints 5.3 Medium -
signalk-servernpm Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding 7.5 High -
signalk-servernpm Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE) 9.7 Critical