NationalSecurityAgency skills-service

• CVE-2026-54694 Critical 9.6 NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover 0.5%
• CVE-2024-39326 Medium 4.4 SkillTree CSRF Vulnerability allows an attacker to modify the Video and Captions of a Skill 0.3%