Start for Free
maven

gov.nsa.emissary:emissary

View on maven registry
7 Total advisories
7 Vulnerabilities
0 Malware

Dependency scanning

Check whether gov.nsa.emissary:emissary is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 8.8
Maven

CVE-2026-35582

Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
MEDIUM 4.8
Maven

CVE-2026-54442

NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
MEDIUM 4.8
Maven

CVE-2026-35571

Emissary has Stored XSS via Navigation Template Link Injection
HIGH 7.2
Maven

CVE-2026-35581

Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
HIGH 7.5
Maven

CVE-2025-27508

Emissary May Use a Broken or Risky Cryptographic Algorithm
CRITICAL 9.1
Maven

CVE-2026-35580

Emissary has GitHub Actions Shell Injection via Workflow Inputs
MEDIUM 5.3
Maven

CVE-2026-35583

Emissary has a Path Traversal via Blacklist Bypass in Configuration API

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes