Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-41893 |
|
Vulnerability in signalk-server (CVE-2026-41893)
vulnerability in signalk-server (CVE-2026-41893). Data can be tampered with by attackers. Exploitable via `POST /login`. Mitigation: upgrade to `2.25.0` or later.
|
| CVE-2026-35038 |
|
Vulnerability in signalk (CVE-2026-35038)
vulnerability in signalk (CVE-2026-35038). Confidential information can be exposed externally. Exploitable via ``from``.
|
| CVE-2026-33951 |
|
Vulnerability in signalk (CVE-2026-33951)
vulnerability in signalk (CVE-2026-33951). Data can be tampered with by attackers. Exploitable via `PUT /signalk/v1/api/sourcePriorities`.
|
| CVE-2026-34083 |
|
Vulnerability in signalk (CVE-2026-34083)
vulnerability in signalk (CVE-2026-34083). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-33950 |
|
Vulnerability in privilege-escalation (CVE-2026-33950)
vulnerability in privilege-escalation (CVE-2026-33950). Confidential information can be exposed externally.
|