nationalsecurityagency/emissary Security Advisories | GitStock

high2026-04-13

Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix

GHSA-3p24-9x7v-7789 · CVE-2026-35582

medium2026-04-08

Emissary has a Path Traversal via Blacklist Bypass in Configuration API

GHSA-hxf2-gm22-7vcm · CVE-2026-35583

high2026-04-08

Emissary has a Command Injection via PLACE_NAME Configuration in Executrix

GHSA-6c37-7w4p-jg9v · CVE-2026-35581

critical2026-04-08

Emissary has GitHub Actions Shell Injection via Workflow Inputs

GHSA-3g6g-gq4r-xjm9 · CVE-2026-35580

medium2026-04-07

Emissary has Stored XSS via Navigation Template Link Injection

GHSA-cpm7-cfpx-3hvp · CVE-2026-35571

high2025-03-05

Emissary May Use a Broken or Risky Cryptographic Algorithm

GHSA-hw43-fcmm-3m5g · CVE-2025-27508