{"action":"Upgrade skilleton to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"skilleton","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-5g3j-89fr-r2vp","id":"tcs_01M5KF3MAECCDQ74WCVWJ794EQ","modified_at":"2026-04-08T00:23:44.063270Z","published_at":"2026-04-08T00:07:36Z","references":["https://osv.dev/vulnerability/GHSA-5g3j-89fr-r2vp","https://github.com/Fcmam5/skilleton/security/advisories/GHSA-5g3j-89fr-r2vp","https://github.com/Fcmam5/skilleton/pull/9/changes/42bc280ad675bfaa7b1bbc192330fb582bb28172","https://github.com/Fcmam5/skilleton/pull/9/changes/6613160803ec8655efee9a270eeaa767ad22da8b","https://github.com/Fcmam5/skilleton"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5g3j-89fr-r2vp","url":"https://osv.dev/vulnerability/GHSA-5g3j-89fr-r2vp"}],"summary":"skilleton has improper input handling in repository/path processing"}