{"action":"Upgrade org.yamcs:yamcs-core to 5.12.7 or later.","affected":[{"fixed":"5.12.7","introduced":"0"}],"component":"org.yamcs:yamcs-core","cve_ids":["CVE-2026-44596"],"ecosystem":"Maven","epss":0.0206,"exploited":false,"fixed_versions":["5.12.7"],"ghsa_id":"GHSA-w5r6-mcgq-7pq4","id":"tcs_01M5N9FNYVA3ZRFB6J06419NBR","modified_at":"2026-05-27T00:26:30.019446Z","published_at":"2026-05-27T00:04:28Z","references":["https://osv.dev/vulnerability/GHSA-w5r6-mcgq-7pq4","https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4","https://github.com/yamcs/yamcs"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-w5r6-mcgq-7pq4","url":"https://osv.dev/vulnerability/GHSA-w5r6-mcgq-7pq4"}],"summary":"Yamcs has No Rate Limiting on Authentication Endpoint"}