All 2 CVE vulnerabilities found in skills-service, with AI-generated Chinese analysis, references, and POCs.
Vendor: NationalSecurityAgency
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54694 | NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover CWE-20 | 9.6 | Critical | 2026-09-09 |
| CVE-2024-39326 | SkillTree CSRF Vulnerability allows an attacker to modify the Video and Captions of a Skill CWE-352 | 4.4 | Medium | 2024-07-02 |
All 2 known CVE vulnerabilities affecting skills-service with full Chinese analysis, references, and POCs where available.