CVE-2019-13625: Nsa Ghidra

Critical severity, CVSS 9.1. EPSS: 2.4% chance of exploitation in the next 30 days.

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

Affected products

• Nsa Ghidra: before 9.0.1 (fixed in 9.0.1)

Published 2019-07-17. Last modified 2026-06-17.