{"action":"Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.","affected":[{"fixed":"5.13.2","introduced":"5.13.0"},{"fixed":"5.12.8","introduced":"0"}],"component":"org.yamcs:yamcs-core","cve_ids":["CVE-2026-55566"],"ecosystem":"Maven","epss":0.0038,"exploited":false,"fixed_versions":["5.13.2","5.12.8"],"ghsa_id":"GHSA-9272-wg2r-7xmx","id":"tcs_01M5N8NS3N2TWFBCPTVCWPSJKH","modified_at":"2026-08-28T17:55:38.188149Z","published_at":"2026-08-28T17:32:16Z","references":["https://osv.dev/vulnerability/GHSA-9272-wg2r-7xmx","https://github.com/yamcs/yamcs/security/advisories/GHSA-9272-wg2r-7xmx","https://github.com/yamcs/yamcs/commit/8e18e279d8ce761c21f4f67bbd06a1bff804d297","https://github.com/yamcs/yamcs/commit/ecf34a4e2ccbe085e6ceff0253595b24d5ecb4aa","https://github.com/yamcs/yamcs","https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8","https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-9272-wg2r-7xmx","url":"https://osv.dev/vulnerability/GHSA-9272-wg2r-7xmx"}],"summary":"Yamcs has DOM XSS in Extension Routing"}