@signalk vulnerabilities

Newest

• @signalk resources-provider, signalk signalk-server +1 more Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution CVE-2026-123807 Fix available 9.8 CriticalOctober 30, 2026