{"action":"Upgrade signalk-server to 2.19.0 or later.","affected":[{"fixed":"2.19.0","introduced":"0"}],"component":"signalk-server","cve_ids":["CVE-2025-68272"],"ecosystem":"npm","epss":0.00564,"exploited":false,"fixed_versions":["2.19.0"],"ghsa_id":"GHSA-7rqc-ff8m-7j23","id":"tcs_01M5KFAW5F6HFQ9SB7N1G0E9WG","modified_at":"2026-02-03T03:15:27.955534Z","published_at":"2026-01-02T15:20:05Z","references":["https://osv.dev/vulnerability/GHSA-7rqc-ff8m-7j23","https://github.com/SignalK/signalk-server/security/advisories/GHSA-7rqc-ff8m-7j23","https://nvd.nist.gov/vuln/detail/CVE-2025-68272","https://github.com/SignalK/signalk-server/commit/55e3574d8266fbc0ed8e453ad4557073541566f5","https://github.com/SignalK/signalk-server","https://github.com/SignalK/signalk-server/releases/tag/v2.19.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7rqc-ff8m-7j23","url":"https://osv.dev/vulnerability/GHSA-7rqc-ff8m-7j23"}],"summary":"Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding"}