SK
Product
skills-service
by NationalSecurityAgency · last CVE Sep 9, 2026
2
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add skills-service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54694
9.6
0%
Sep 9
NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
Affected: < 4.4.2
CVE-2024-39326
4.4
0%
Jul 2
SkillTree CSRF Vulnerability allows an attacker to modify the Video and Captions of a Skill
Affected: < 2.12.6
Showing 2