All products

@signalk/resources-provider

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Signal K resources API path traversal can disclose the JWT signing secret and enable remote code executionCVE-2026-123807 · GHSA-4XM8-RG9H-JHQ2 @signalk/resources-providersignalk-server npm Critical Fix reported