NationalSecurityAgency vulnerabilities
We track 13 vulnerabilities in NationalSecurityAgency products across 3 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2026.
Latest NationalSecurityAgency vulnerabilities
- 7.0 High severity
ghidra: Out-of-bounds Write
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that
- 9.6 Critical severity
SkillTree is a micro-learning gamification platform.
SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. `StringHighlighter.js` builds an HTML string by
- 8.8 High severity
ghidra: Improper Neutralization of Special Elements used in an SQL Command
Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without escaping or parameterization. Remote attackers can inject arbitrary SQL via the BSim network query protocol t
- 7.8 High severity
ghidra: Improper Limitation of a Pathname to a Restricted Directory
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to exe
- 8.8 High severity
ghidra: Improper Verification of Cryptographic Signature
Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by presenting their public certificate with a null signature. Attack
- 7.8 High severity
ghidra: Improper Limitation of a Pathname to a Restricted Directory
Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with traversal sequences like ../ in filenames to write arbitrary files o
- 8.8 High severity
ghidra: Deserialization of Untrusted Data
Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a malicious project file with a ghidra:// URL that, when opened via Fil
- 7.8 High severity
ghidra: Improper Neutralization of Argument Delimiters in a Command
Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands under the Ghidra user's privileges by embedding malicious URLs i
- 8.8 High severity
ghidra: Improper Neutralization of Special Elements used in an SQL Command
Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE statements. Authenticated attackers can inject SQL commands v
- 8.8 High severity
emissary: Improper Neutralization of Special Elements used in an OS Command
Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable to OS command injection because it interpolates temporary file paths into a /bin/sh -c shell command string without any escaping or input va
- 7.2 High severity
emissary: Improper Neutralization of Special Elements used in an OS Command
Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utility class constructed shell commands by concatenating configuration-derived values — including the PLACE_NAME parameter — with insufficient sanitization. Only spaces were r
- 9.1 Critical severity
emissary: Improper Neutralization of Special Elements used in a Command
Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An
- 7.5 High severity
emissary: Use of a Broken or Risky Cryptographic Algorithm
Emissary is a P2P based data-driven workflow engine. The ChecksumCalculator class within allows for hashing and checksum generation, but it includes or defaults to algorithms that are no longer recommended for secure cryptographic use cases (e.g., SHA-1, CRC32