Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

gov.nsa.emissary:emissary

7 known vulnerabilities (1 critical, 3 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 critical, 3 high, 3 medium
Dependents
0
Registry
Maven Central

Advisories 7

  • CVE-2026-54442Medium 4.8

    NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF

    Affected: fixed in 8.51.0.

  • Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix

    Affected: fixed in 8.43.0.

  • CVE-2026-35583Medium 5.3

    Emissary has a Path Traversal via Blacklist Bypass in Configuration API

    Affected: fixed in 8.39.0.

  • Emissary has a Command Injection via PLACE_NAME Configuration in Executrix

    Affected: fixed in 8.39.0.

  • CVE-2026-35580Critical 9.1

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    Affected: fixed in 8.39.0.

  • CVE-2026-35571Medium 4.8

    Emissary has Stored XSS via Navigation Template Link Injection

    Affected: fixed in 8.39.0.

  • Emissary Use of a Broken or Risky Cryptographic Algorithm

    Affected: fixed in 8.24.0.