Security
فارسی
All products

org.yamcs:yamcs-core

Maven · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Yamcs has DOM XSS in Extension RoutingCVE-2026-55566 · GHSA-9272-WG2R-7XMX org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)CVE-2026-55565 · GHSA-C64Q-HJ4J-375F org.yamcs:yamcs-core Maven Critical Fix reported
Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)CVE-2026-55559 · GHSA-73MF-M39P-WPM9 org.yamcs:yamcs-core Maven Critical Fix reported
Yamcs has Unauthenticated Directory TraversalCVE-2026-55552 · GHSA-9JG3-G3WH-W9PJ org.yamcs:yamcs-core Maven High Fix reported
Yamcs has Reflected XSS in the URL of the Authorize EndpointCVE-2026-55549 · GHSA-RXPG-WJF8-QV9C org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security ConfigurationCVE-2026-55547 · GHSA-CVW4-55PP-3HFQ org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packetsCVE-2026-55548 · GHSA-8XJQ-PR36-CCGF org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs's WebSocket subscription handlers omit the privilege checks their REST siblings enforceCVE-2026-55545 · GHSA-FWWW-CP23-7F5G org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilitiesCVE-2026-55521 · GHSA-962X-CCWF-8X6P org.yamcs:yamcs-core Maven High Fix reported
Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`CVE-2026-55511 · GHSA-3G44-3M7X-CGG2 org.yamcs:yamcs-core Maven Critical Fix reported
Yamcs Vulnerable to LDAP Injection in LdapAuthModuleCVE-2026-42568 · GHSA-CQH3-JG8P-336J org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code InjectionCVE-2026-46621 · GHSA-2G95-6X5Q-XJWJ org.yamcs:yamcs-core Maven Critical Fix reported
Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm overrideCVE-2026-46562 · GHSA-VMWP-VH32-RJ75 org.yamcs:yamcs-core Maven Critical Fix reported
Yamcs has No Rate Limiting on Authentication EndpointCVE-2026-44596 · GHSA-W5R6-MCGQ-7PQ4 org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs vulnerable to unauthorized user enumeration via IAM API endpointsCVE-2026-44595 · GHSA-P2RJ-MRMC-9W29 org.yamcs:yamcs-core Maven Medium Fix reported
Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`CVE-2026-44632 · GHSA-524G-X36V-9WM6 org.yamcs:yamcs-core Maven Critical Fix reported