Login Request a demo
SI
Product
signalk-server
by SignalK · last CVE Oct 28, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 3High 8Medium 6Low 0
Severity
All severities17Critical3High8Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add signalk-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35038
6.5
0%
Apr 2
signalk-server: Arbitrary Prototype Read via `from` Field Bypass
Affected: < 2.24.0
CVE-2026-34083
6.1
0%
Apr 2
signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow
Affected: < 2.24.0
CVE-2026-55591
5.8
0%
Sep 15
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
Affected: < 2.28.0
CVE-2025-68273
5.3
1%
Jan 1
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
Affected: < 2.19.0
CVE-2026-25228
4.3
0%
Feb 2
SignalK Server has Path Traversal leading to information disclosure
Affected: < 2.20.3
CVE-2026-115752
New
4.2
0%
Oct 23
Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon
Affected: 2.28.0-beta.2 before 2.34.0
Showing 6