Skip to content
OpenAdvisories

Vendor

National Security Agency

40 known vulnerabilities.

Products

ghidra 28 emissary 10 skills-service 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-35580 Public exploit

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An…

    National Security Agency emissary gov.nsa.emissary:emissary Maven