Note
Please report security issues responsibly.
Our community-wide security policy is available here: https://contribute.freecodecamp.org/security
Security: freeCodeCamp/freeCodeCamp
Security
SECURITY.md
-
Insecure JWT Token Storage in BrowserGHSA-qf62-hv7h-v8m8 published
Jun 25, 2025 by raisedadeadHigh -
ProfileUI User Document AbuseGHSA-f69g-q6v2-rhjp published
Oct 31, 2023 by raisedadeadLow -
Clickjacking with social links - users ProfileGHSA-6c37-r62q-7xf4 published
Jul 18, 2023 by raisedadeadModerate -
Mass Assignment of User Model Allows for Acquisition of Unearned CertificationsGHSA-cc3r-grh4-27gj published
Apr 14, 2022 by raisedadeadModerate -
[CSRF] Missing validation on API requestsGHSA-qvm6-c326-w8px published
Mar 17, 2020 by raisedadeadLow -
[XSS] Client application messages parameterGHSA-6f55-fqxx-v7mw published
Mar 17, 2020 by raisedadeadLow
Learn more about advisories related to freeCodeCamp/freeCodeCamp in the GitHub Advisory Database