signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity

Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling

RCE - Command Injection in Signal K set-system-time plugin

Signal K Server Vulnerable to Access Request Spoofing

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)

Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

signalk-server: Unauthenticated Source Priorities Manipulation

Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding

Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package

signalk-server: Arbitrary Prototype Read via `from` Field Bypass

signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow

Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints

SignalK Server has Path Traversal leading to information disclosure