PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
signalk-server Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution Critical 9.8 6 hours ago 5 hours ago
signalk-server signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher Medium Risk 4.2 6 hours ago 5 hours ago
signalk-server Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints Medium Risk 5.8 4 months ago 4 months ago
signalk-server Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force) High Risk 8.0 5 months ago 5 months ago
signalk-server Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths High Risk 7.5 6 months ago 6 months ago
signalk-server Signal K Server: Unauthenticated Source Priorities Manipulation High Risk 7.5 7 months ago 6 months ago
signalk-server Signal K Server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow Medium Risk 6.1 7 months ago 7 months ago
signalk-server Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity Critical 9.4 7 months ago 7 months ago
signalk-server Signal K Server: Arbitrary Prototype Read via `from` Field Bypass Low Risk 3.0 7 months ago 7 months ago
signalk-server SignalK Server has Path Traversal leading to information disclosure Medium Risk 5.0 9 months ago 8 months ago
signalk-server Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package High Risk 7.2 10 months ago 9 months ago
signalk-server Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding High Risk 7.5 10 months ago 9 months ago
signalk-server Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints Medium Risk 5.3 10 months ago 9 months ago
signalk-server Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE) Critical 9.6 10 months ago 9 months ago
signalk-server Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling Critical 9.1 10 months ago 9 months ago
signalk-server Signal K Server Vulnerable to Access Request Spoofing Medium Risk 6.3 10 months ago 9 months ago
Data courtesy of OSV.dev
Page 1