CVE security advisories and vulnerability history for signalk-server by npm.
Last updated
npm signalk-server has 13 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting npm signalk-server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of npm signalk-server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of npm signalk-server's CVEs are currently listed in CISA's KEV catalog.
Public exploits
12
12 of npm signalk-server's CVEs have a known public exploit available.
Browse every npm signalk-server version named in a CVE, then pick one to see only the CVEs that affect it.
13 CVEs
The CWE weakness categories most often found in npm signalk-server CVEs. Follow any weakness for its full explanation.
Browse vulnerabilities for other products by npm.
Common questions about npm signalk-server vulnerabilities.
npm signalk-server has 13 published CVE records since 2026.
None of npm signalk-server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Yes — 12 of npm signalk-server's CVEs have a known public exploit.
7 distinct npm signalk-server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
npm signalk-server's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-1333 (Inefficient Regular Expression Complexity), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
npm signalk-server has 3 critical and 4 high-severity CVEs.
The average CVSS base score across npm signalk-server's scored CVEs is 7.0.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new npm signalk-server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
