{"id":"CVE-2026-55549","summary":"Yamcs: Reflected XSS in the URL of the Authorize Endpoint","details":"Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java and yamcs-core/src/main/java/org/yamcs/http/HandlerContext.java. A crafted authorization URL can execute JavaScript when opened by a Yamcs user. The script can access browser-held authentication material and transmit it to an attacker, enabling account compromise. This issue is fixed in version 5.9.4.","aliases":["GHSA-rxpg-wjf8-qv9c"],"modified":"2026-09-10T08:13:51.957737Z","published":"2026-08-28T17:15:52.840Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55549.json"},"references":[{"type":"WEB","url":"https://github.com/yamcs/yamcs/releases/tag/yamcs-5.9.4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55549.json"},{"type":"ADVISORY","url":"https://github.com/yamcs/yamcs/security/advisories/GHSA-rxpg-wjf8-qv9c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55549"},{"type":"FIX","url":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/yamcs/yamcs","events":[{"introduced":"0"},{"fixed":"4d47d5cdcf5d92c2c5bbbc19feada422923332e3"},{"fixed":"3bf77d5883be99c85ec153064307ce8ba25020f5"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"5.9.4"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["yamcs-5.9.3","yamcs-5.9.2","yamcs-5.9.1","yamcs-5.9.0","yamcs-5.8.8","yamcs-5.8.7","yamcs-5.8.6","yamcs-5.8.5","yamcs-5.8.4","yamcs-5.8.3","yamcs-5.8.2","yamcs-5.8.0","yamcs-5.8.1","yamcs-5.7.10","yamcs-5.7.9","yamcs-5.7.8","yamcs-5.7.7","yamcs-5.7.6","yamcs-5.7.5","yamcs-5.7.4","yamcs-5.7.3","yamcs-5.7.2","yamcs-5.7.1","yamcs-5.7.0","yamcs-5.6.2","yamcs-5.5.7","yamcs-5.6.1","yamcs-5.6.0","yamcs-5.5.6","before-removing-cfdp-half-implemented-features","yamcs-5.5.5","yamcs-5.5.4","yamcs-5.5.3","yamcs-5.5.2","yamcs-5.5.1","yamcs-5.5.0","yamcs-5.3.5","yamcs-5.4.3","yamcs-5.4.2","yamcs-5.4.1","yamcs-5.4.0","yamcs-5.2.0","yamcs-5.3.4","yamcs-5.3.3","yamcs-5.3.2","yamcs-5.3.1","yamcs-5.3.0","yamcs-5.1.3","yamcs-5.1.2","yamcs-5.1.1","yamcs-5.1.0","yamcs-5.0.1","yamcs-5.0.0","yamcs-4.10.9","yamcs-4.10.8","yamcs-4.10.7","yamcs-4.10.6","yamcs-4.10.5","yamcs-4.10.4","yamcs-4.10.3","yamcs-4.10.2","yamcs-4.10.1","yamcs-4.10.0","yamcs-4.9.5","yamcs-4.9.4","yamcs-4.9.3","yamcs-4.9.2","yamcs-4.9.1","yamcs-4.9.0","yamcs-4.8.1","yamcs-4.8.0","yamcs-4.7.3","yamcs-4.7.2","yamcs-4.7.1","yamcs-4.7","yamcs-4.4.2","yamcs-4.4.1","yamcs-4.4.0","yamcs-4.3.1","yamcs-4.3.0","yamcs-4.2.2","yamcs-4.2.1","yamcs-4.2.0","yamcs-4.1.2","yamcs-4.1.1","yamcs-4.0.1","yamcs-3.4.0","yamcs-3.3.0","yamcs-3.2.2","yamcs-3.2.1","yamcs-3.2.0","yamcs-3.1.2","yamcs-3.1.1","yamcs-3.1.0","yamcs-3.0.0","yamcs-0.30.0","v0.29.4","v0.29.3-20160608","v0.29.3","v0.29.1","v0.29.1-20160127","v0.29.1-20160119","v0.29.1-20151214","v0.29.0","v0.28.0","v0.28.0-20150903","v0.28.0-20150902-2","v0.28.0-20150902","v0.28.0-20150901","v0.28.0-20150828","v0.28.0-20150827","v0.28.0-20150826","v0.28.0-20150825","v0.28.0-20150824","v0.28.0-20150820","v0.28.0-20150817","v0.28.0-20150811","v0.26.1","v0.26.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55549.json","vanir_signatures_modified":"2026-09-10T08:13:51Z","vanir_signatures":[{"id":"CVE-2026-55549-0189f0ca","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParserConstants.java"},"deprecated":false,"digest":{"line_hashes":["101804812291144012076583951920432103956","20064107674117035066498321540670401277","188235009172270687297995601349671158520","125924737668124476358495873931128198592","323325196482661464230102932569696437500","68636981289253119246424103780397994368","225215103336619008542940573390292818362","226597268777761088062489086455144946488","24978253702854815174582444794650019522"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"TemplateParser"},"deprecated":false,"digest":{"function_hash":"70266192357136408710408350822187523243","length":459},"id":"CVE-2026-55549-0898d707"},{"source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TextStatement.java"},"deprecated":false,"digest":{"line_hashes":["100963878182134835573798782213144557073","248342506722701290258387392553988919050","11207640541449260655602847239602574340","193267674254828166435183470923772017775"],"threshold":0.9},"id":"CVE-2026-55549-1447a6b8","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"57713437321670182427828090535084544829","length":169},"id":"CVE-2026-55549-1e7be074","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateBody.java","function":"render"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java","function":"process"},"deprecated":false,"digest":{"function_hash":"78732746311545022043002110342353169902","length":81},"id":"CVE-2026-55549-20c5b74e"},{"signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"ReInit"},"deprecated":false,"digest":{"function_hash":"82084685050846136246949307610086547193","length":457},"id":"CVE-2026-55549-22abdba8","signature_type":"Function"},{"source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java","function":"render"},"deprecated":false,"digest":{"function_hash":"279516605626165226065121185329973088741","length":229},"id":"CVE-2026-55549-45cbacc3","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"307815057040463612133760140581959146490","length":76},"id":"CVE-2026-55549-46e5a495","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"function":"render","file":"yamcs-core/src/main/java/org/yamcs/templating/TextStatement.java"}},{"deprecated":false,"digest":{"function_hash":"281215460538656722522121829805325330890","length":1645},"id":"CVE-2026-55549-517a5706","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"function":"jjMoveNfa_2","file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java"}},{"deprecated":false,"digest":{"function_hash":"82601796351198946091148273477628796785","length":343},"id":"CVE-2026-55549-5da4de9a","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"ReInit"}},{"deprecated":false,"digest":{"line_hashes":["336105549070042037411169429758633721238","319665808877232021070077526308081903685","205627813756137053203851760048947016708","207721525204368341360921474905013681432","295368496533633202446106882203351835252","112343499929982506190069888090689170141","297757419225340821137759089705794438060","46291995630169421125161857692656740871","337471899815776112883403667221550349898","309832903926181149673601536118148318225","225105057821494000748853120570845517634","44348452889594252330231579452663321203","71976015572448975022650288857581416679","309564214233240720319381158945842748103","236822092674102124998395923301566611978","201897499786216302771076763627037590510","104796858593718542170409478321444479195","197071055777009741305152949515592170943","260313621853140056777311422012036971206","78632155450259338589234890371151936015","58616287977780477565968128082425040933","102205221746623805471681553482404585534","183904182719573590287379053321734439769","146661649402919268086182996502253817494","44203610038355524656846631508388799200","290842811572574893093812017077217833977","146648088068932663617935643110147970399","84833269210246039221489318845716283818","188139064947566684578782383182677987461","48074170075270580776453551186061220978","71521104235218598530659477626902086614","16579063042151934603399712998613646561","236822092674102124998395923301566611978","185455295504033065732947995795669925645","81165037879126227497445758374702447061","314476067975464700481498878268189143650","193858691869161732969977647756730866310","78632155450259338589234890371151936015","58616287977780477565968128082425040933","298121843422798048305642013867390251482","152450431018174068771400187769587992707","210077407992814815705398376847108291189","154732402611086866053810923950109537250","76228499051506877973047254475568433665","147060277335319851014707617120692545796","173409233346972146295019123270839857847","305521867549521799330461734434109210905","48074170075270580776453551186061220978","273834886957604886011789390547113800906","189035705484940896534053567046589211353","232798913043679171928880621564224524279","127959859577058017740068241599858954031","284330190410925741267805085960764646184","314457261615617105744301744694198971521","224932424631254672725586364621506793689","21304968414330263996784832797997143476","234752068125652818318796058608481161041","333092537371448964159848497297865970572","329813830940944588922648682588440435132","318775228165481678958092599814057167119","33746823683069165186501007384002209843","3184477090420924939442861723813643001","190626871700452796962599559549456805648","111862923733226741548834182367142097112","257503619479527876758474008482795337293","90551798776688790267870851876000783747","135586801810729432317169565469930902232","78948233005585232412350869610743923761","20928739892207191852030783098064028096","34031450664658614274823053204517750756","96906329854784824465195679706537922171","191531357102317179275049018859480045104","122000182888281643959556689514305082046","34628426814630789359011539625560586131","181585595800507948604745019371179476722","176559874561455807883502021901889973357","307874133842782614788408609377251793129","30685501084582925431051694943644623620","209894669348326887170188397933389250186","265338660977672109117728994771023570784","320330396337632574287543418339154116035","315440374675668458770130492224015719778","53127471471335822664906693856884949782","14475169573752177112289354955554208316"],"threshold":0.9},"id":"CVE-2026-55549-74daddba","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java"}},{"id":"CVE-2026-55549-773622af","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"TemplateParser"},"deprecated":false,"digest":{"function_hash":"79196849801499198791606129212121133561","length":267}},{"id":"CVE-2026-55549-78a7b471","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"ReInit"},"deprecated":false,"digest":{"function_hash":"160284035300300343790410547342878024339","length":273}},{"id":"CVE-2026-55549-7b304b89","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"function":"getNextToken","file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java"},"deprecated":false,"digest":{"function_hash":"36962988896202129933136172231996646146","length":2110}},{"signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java","function":"jjMoveNfa_3"},"deprecated":false,"digest":{"function_hash":"310897354362824824459951495386221594019","length":1533},"id":"CVE-2026-55549-7f462e3b","signature_type":"Function"},{"target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java"},"deprecated":false,"digest":{"line_hashes":["144245011949490195171780094205528976959","262050766247620609071116191353614071292","105394629212576993593199137458120913972","214250836430572104259000391958774530509","220246268107498088443385826406630815720","17581219909309615049689580756956495344","140013100473830328165226246326119474626","107914244724125196886198338878637545908","28431768185505366525604769813657407118","51432960653142507801020136182429399372"],"threshold":0.9},"id":"CVE-2026-55549-82dfed32","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3"},{"source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"TemplateParser"},"deprecated":false,"digest":{"function_hash":"318341910123986967839555061008152484461","length":345},"id":"CVE-2026-55549-83094047","signature_type":"Function","signature_version":"v1"},{"target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/Statement.java"},"deprecated":false,"digest":{"line_hashes":["102091866649715057829556120993365092718","171669095154728340034778830951323950564"],"threshold":0.9},"id":"CVE-2026-55549-8752550e","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3"},{"target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/IfStatement.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321423077349538638303668348878912693243","140013100473830328165226246326119474626","56251177336488753961599116116256166700","89900047242158141944903897370235475986","181539421469654425676074377623227886430","102218996743086046453440904096011569437","256401548523517655671689850686503493605","168736368470898674492112934218070405267","282758048488921561540676930783397364504","156136087694944419005303014038584327126","188109292902692966712661315775132773397","155827571077400747008174391930941752516","263938827729220715852826646950523513144","285460152407152589901742856712226328880","180997999034790378151979469982583009822","224442266711173763901687334731600886501","104152399390048124175212460171971247355","3113955353034581516571203860140230882"]},"id":"CVE-2026-55549-97b36b3f","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3"},{"deprecated":false,"digest":{"line_hashes":["297295177720296249864148989022309737460","33542565468246741487399624027703822737","71289943260826782446942501272763280689","322172121783288272769141047044084329823","157549589361543918848433523306963068272","235076303389980586577231412959286573815","304521895614751624962418128371222850980","15109700393717823941322743507070393243","253085268688749778002089524794283159569","242592351596059513407336788573839764206","264363773136942901828550137100818466460","252605948202796351613114806112860091137","299910156289155362985570703969116749341","184685906468848784299646154139897171008","108223203599134368174210760348520233483","109832103440465514739693092849224868259","253765069487596105916137610864827953906","290012930359025216334270960567274487089","179221932174465823674676387802258987966","80340944855378992852822246151922016109","235728968988439051885374127179047168905","125762983109435093529808969443715172886","197283661987363274459709957488141151107","112165390597603465142786935379709258736","66150738005775409554975672507213778175","270261692255823190778090952983621697452","110880691191254935601868674462063946657","267563269724041685570440893975517523951","50111504850111245242623037486099433589","211497843122013655899135195206051427816","186092932463610927087075469177315865822","176091200347744023424355204545179596722","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","89384508629967493176254546515991510095","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","219475593470518823188329967398884184451","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","187155541759801474956716172129779244473","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","201973318962509287967763780482792124496","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","164716756426171166214837069616548177435","132829094636948175321532421247955852286","298878087735904148175758234380500719883","153774732534565518287320144275548868649","284754167859155341127146699154348490174","89737361754495363774439258023288132110","279762568240208678544427188036790372539","287193085683072015022621406091117691565","91701765104279068571068399839954626702","234317204801746480241564671673321470429","196698980264053305040533811423338946842","232307157693182175913217276260860442628","109283690884633241512863020191003609303","247912686864747974567494216746183434552","5068187545725198794672517398507559727","260302635436400517093619413299322054993","122601289960360481705328647100385773570","246942771534448892828448287554603607131"],"threshold":0.9},"id":"CVE-2026-55549-a6dd75ec","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateBody.java"},"deprecated":false,"digest":{"line_hashes":["332159531994148654962524839196962956258","185800838100145598884924729411635730444","271481189912295691683024544139252926462","276591025568645858736107645775040071377","275602599579361690610683757263342121823","197209166556775174167352121554757442997","59910003161882992214097134088835877292"],"threshold":0.9},"id":"CVE-2026-55549-b3162b90"},{"signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/test/java/org/yamcs/templating/TemplateProcessorTest.java"},"deprecated":false,"digest":{"line_hashes":["101800880935952532611732838232423186765","306035298386758857812492674819320913265"],"threshold":0.9},"id":"CVE-2026-55549-b5e9efd7","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["247806208002073072914781367426254751206","91812618195314169688075905875262274082","212186918565961232407869161221795496611","100471946932051015290782180107767293551","87789039011457064450498562487112023394","251299359341232257879371382836989993349","294896081041747150052553490510516092742","97966737876467436519997552470170441010","231851583986734300745991121674142621925","243898320524959388395183136758649261507","22207182862757203782774204754798647667","308328434577700684533584153968115097069","208736929649137747655936606186474153374","160818838221991073989764993484686479942","76483337315584592548161071373833598522"],"threshold":0.9},"id":"CVE-2026-55549-b87f3d86","signature_type":"Line","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java"}},{"id":"CVE-2026-55549-ba0c692a","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java","function":"TemplateProcessor"},"deprecated":false,"digest":{"length":190,"function_hash":"199840331207602835567077352966656613884"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"jj_la1_init_0"},"deprecated":false,"digest":{"length":80,"function_hash":"264485507365680111644307624602119968216"},"id":"CVE-2026-55549-bd682605"},{"source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/IfStatement.java","function":"render"},"deprecated":false,"digest":{"length":467,"function_hash":"80665898778293974665598667639492389776"},"id":"CVE-2026-55549-cd188416","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"varStatement"},"deprecated":false,"digest":{"length":233,"function_hash":"31234179178587685993139208239620556275"},"id":"CVE-2026-55549-d033dc1d","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"ifStatement"},"deprecated":false,"digest":{"function_hash":"175015197842419354926459627360326746992","length":883},"id":"CVE-2026-55549-f16649c2"},{"deprecated":false,"digest":{"function_hash":"312927393610462170414232955454073023907","length":805},"id":"CVE-2026-55549-fe569220","signature_type":"Function","signature_version":"v1","source":"https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3","target":{"file":"yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java","function":"generateParseException"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}]}