Repository navigation
Security: NationalSecurityAgency/skills-service
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Privilege escalation to root admin via Inception token endpoint IDORGHSA-gx26-q78q-6hxr published
Sep 18, 2026 by rmmayoHigh -
Cross-project IDOR in NationalSecurityAgency/skills-service validateCopy endpointGHSA-p527-vjfp-c43p published
Jul 16, 2026 by rmmayoModerate -
Privilege escalation in NationalSecurityAgency/skills-service: admin-group assignment grants admin without authorization (project/quiz/badge takeover)GHSA-67x3-r85f-822r published
Jul 16, 2026 by rmmayoHigh -
Stored XSS in NationalSecurityAgency/skills-service via User Registration Enabling Admin Account TakeoverGHSA-hqfg-c8wf-w2g8 published
Jun 16, 2026 by sudo-mayCritical -
CSRF Vulnerability allows an attacker to modify the Video and Captions of a SkillGHSA-9624-qwxr-jr4j published
Jul 2, 2024 by rmmayoModerate
Learn more about advisories related to NationalSecurityAgency/skills-service in the GitHub Advisory Database