Skip to content
OpenAdvisories

Vendor

National Security Agency

40 known vulnerabilities.

Products

ghidra 28 emissary 10 skills-service 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.6
    CVE-2026-116012 Public exploit

    Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser

    Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sl…

    National Security Agency ghidra
  • High 7.0
    CVE-2026-18718 Public exploit

    Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State

    Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-…

    National Security Agency ghidra
  • Critical 9.1
    CVE-2026-35580 Public exploit

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An…

    National Security Agency emissary gov.nsa.emissary:emissary Maven