{"action":"Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.","affected":[{"fixed":"5.13.2","introduced":"5.13.0"},{"fixed":"5.12.8","introduced":"0"}],"component":"org.yamcs:yamcs-core","cve_ids":["CVE-2026-55565"],"ecosystem":"Maven","epss":0.0065,"exploited":false,"fixed_versions":["5.13.2","5.12.8"],"ghsa_id":"GHSA-c64q-hj4j-375f","id":"tcs_01M5N8RPTS4HE5WVZXGNHS7M2E","modified_at":"2026-08-28T17:55:38.149008Z","published_at":"2026-08-28T17:30:32Z","references":["https://osv.dev/vulnerability/GHSA-c64q-hj4j-375f","https://github.com/yamcs/yamcs/security/advisories/GHSA-c64q-hj4j-375f","https://github.com/yamcs/yamcs/commit/640e1598b7097b521692e89dd47a39b6cb1fc663","https://github.com/yamcs/yamcs/commit/a8fb4a0693fa62a6eb729b26016d1090dd8b289c","https://github.com/yamcs/yamcs","https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8","https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-c64q-hj4j-375f","url":"https://osv.dev/vulnerability/GHSA-c64q-hj4j-375f"}],"summary":"Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)"}