@signalk/resources-provider vulnerabilities

CVEs whose affected-version data names the @signalk/resources-provider package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-4xm8-rg9h-jhq2Critical· 9.8

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

▾ Midnightsignalk-server · signalk-servervia GHSA

@signalk/resources-provider vulnerabilities (CVEs) · VulnSea