gov.nsa.emissary:emissary vulnerabilities
CVEs whose affected-version data names the gov.nsa.emissary:emissary package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-35581High· 7.2Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
▾ Twilightnsa · gov.nsa.emissary:emissaryEPSS 0.58%via GHSA
CVE-2026-35571Medium· 4.8Emissary has Stored XSS via Navigation Template Link Injection
Emissary has Stored XSS via Navigation Template Link Injection
▾ Sunlitnsa · gov.nsa.emissary:emissaryEPSS 0.18%via GHSA