{"action":"Upgrade org.yamcs:yamcs-core to 5.9.4 or later.","affected":[{"fixed":"5.9.4","introduced":"0"}],"component":"org.yamcs:yamcs-core","cve_ids":["CVE-2026-55549"],"ecosystem":"Maven","epss":0.01305,"exploited":false,"fixed_versions":["5.9.4"],"ghsa_id":"GHSA-rxpg-wjf8-qv9c","id":"tcs_01M5N9CWCF5V14S9NFV1GDRM3F","modified_at":"2026-08-28T17:40:35.523121Z","published_at":"2026-08-28T17:17:50Z","references":["https://osv.dev/vulnerability/GHSA-rxpg-wjf8-qv9c","https://github.com/yamcs/yamcs/security/advisories/GHSA-rxpg-wjf8-qv9c","https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","https://github.com/yamcs/yamcs","https://github.com/yamcs/yamcs/releases/tag/yamcs-5.9.4"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rxpg-wjf8-qv9c","url":"https://osv.dev/vulnerability/GHSA-rxpg-wjf8-qv9c"}],"summary":"Yamcs has Reflected XSS in the URL of the Authorize Endpoint"}