GHSA-ppfx-73j5-fhxc: Skill-scanner Unsecured Network Binding Vulnerability
Summary
Skill-scanner versions 1.0.1 and earlier have a vulnerability in their API Server (a network interface that lets external programs communicate with the software) where the server is incorrectly exposed to multiple network interfaces without proper authentication. An attacker could send requests to this server to cause a denial of service attack (making it unavailable by exhausting its resources) or upload files to unintended locations on the device.
Solution / Mitigation
Update to Skill-scanner version 1.0.2 or later, which contains the fix for this vulnerability.
Vulnerability Details
EPSS: 0.1%
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2022-29200: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem
CVE-2021-29541: TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null p
Original source: https://github.com/advisories/GHSA-ppfx-73j5-fhxc
First tracked: February 17, 2026 at 02:12 PM
Classified by LLM (prompt v3) · confidence: 72%