CVE-2026-55565
1 advisory.
Maven/org.yamcs:yamcs-core CVE-2026-55565: critical 9.9
Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)
Action: Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.13.0 | 5.13.2 | - |
| 0 | 5.12.8 | - |
Fixed versions
| 5.13.2 | 5.12.8 |
Sources
- osv: GHSA-c64q-hj4j-375f
- https://github.com/yamcs/yamcs/security/advisories/GHSA-c64q-hj4j-375f
- https://github.com/yamcs/yamcs/commit/640e1598b7097b521692e89dd47a39b6cb1fc663
- https://github.com/yamcs/yamcs/commit/a8fb4a0693fa62a6eb729b26016d1090dd8b289c
- https://github.com/yamcs/yamcs
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2
CVE-2026-55565 · published · modified · JSON