CVE-2026-35582

< 8.43.0

Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable to OS comm

8.8HIGH

CVE-2026-35583

<= 8.38.0

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) v

5.3MEDIUM

CVE-2026-35581

<= 8.38.0

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utility class constructed shell commands by co

7.2HIGH

CVE-2026-35580

>= 5.10.0 and <= 8.38.0

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection poin

9.1CRITICAL

CVE-2026-35571

<= 8.38.0

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-con

4.8MEDIUM

CVE-2021-32639

<= 6.4.0

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF).

7.2HIGH

CVE-2021-32647

all versions

Emissary is a P2P based data-driven workflow engine. Affected versions of Emissary are vulnerable to post-authentication Remote Co

8.0HIGH

CVE-2021-32634

all versions

Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of

7.2HIGH

CVE-2021-32093

all versions

The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrar

6.5MEDIUM

CVE-2021-32092

all versions

A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 a

6.1MEDIUM

CVE-2021-32096

all versions

The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting a

8.8HIGH

CVE-2021-32095

all versions

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.

8.1HIGH

CVE-2021-32094

all versions

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.

8.8HIGH