SignalK
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 1, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths
signalk-server: Arbitrary Prototype Read via `from` Field Bypass
signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow
signalk-server: Unauthenticated Source Priorities Manipulation
signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
SignalK Server has Path Traversal leading to information disclosure
RCE - Command Injection in Signal K set-system-time plugin
Signal K Server Vulnerable to Access Request Spoofing
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Monitor SignalK in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.