skills-service vulnerabilities

CVEs whose affected-version data names the skills-service package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54694Critical· 9.6PoC

2w ago

SkillTree is a micro-learning gamification platform

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. `StringHighlighter.js` b…

▾ AbyssalNationalSecurityAgency · skills-serviceEPSS 0.28%via NVD