org.yamcs:distribution (4.10.7), org.yamcs:packet-viewer (4.10.7) +4 more potentially affected by CVE-2026-55548 via org.yamcs:yamcs-core (4.10.7)

org.yamcs:yamcs-core MAVEN version 4.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:distribution 4.10.7 - org.yamcs:packet-viewer 4.10.7 - org.yamcs:simulation 4.10.7 - org.yamcs:yamcs-artemis...

org.yamcs:distribution (>=5.0.0, <=5.12.7), org.yamcs:packet-viewer (>=5.0.0, <=5.12.7) +9 more potentially affected by CVE-2026-44632 +1 more via org.yamcs:yamcs-core (>=5.0.0, <=5.12.7)

org.yamcs:yamcs-core MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.1.0, =5.5.6, =0.1.0, =1.0.0, =0.1, =1.0.0, =5.0.0, =5.0.0, =0.1.0, =0.8.1 Source cves: CVE-2026-44632, CVE-2026-55511 Source advisory: OSV:GHSA-3G44-3M7X-CGG2...

Cross-site Scripting (XSS)

yamcs-web is vulnerable to Cross-site Scripting XSS. The vulnerability is present because there is insufficient validation when uploading files in the library. This flaw enables an attacker to upload an HTML file that contains arbitrary JavaScript. When a user opens this file, the arbitrary...