CVE-2026-55549
- Source
- https://cve.org/CVERecord?id=CVE-2026-55549
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55549.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-55549
- Aliases
- Published
- 2026-08-28T17:15:52Z
- Modified
- 2026-09-10T08:13:51Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Yamcs: Reflected XSS in the URL of the Authorize Endpoint
- Details
-
Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java and yamcs-core/src/main/java/org/yamcs/http/HandlerContext.java. A crafted authorization URL can execute JavaScript when opened by a Yamcs user. The script can access browser-held authentication material and transmit it to an attacker, enabling account compromise. This issue is fixed in version 5.9.4.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-79" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55549.json" }- References
-
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.9.4
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55549.json
- https://github.com/yamcs/yamcs/security/advisories/GHSA-rxpg-wjf8-qv9c
- https://nvd.nist.gov/vuln/detail/CVE-2026-55549
- https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3
Affected packages
Git / github.com/yamcs/yamcs
Affected versions
Other
before-removing-cfdp-half-implemented-features
v0.*
v0.26.0
v0.26.1
v0.28.0
v0.28.0-20150811
v0.28.0-20150817
v0.28.0-20150820
v0.28.0-20150824
v0.28.0-20150825
v0.28.0-20150826
v0.28.0-20150827
v0.28.0-20150828
v0.28.0-20150901
v0.28.0-20150902
v0.28.0-20150902-2
v0.28.0-20150903
v0.29.0
v0.29.1
v0.29.1-20151214
v0.29.1-20160119
v0.29.1-20160127
v0.29.3
v0.29.3-20160608
v0.29.4
yamcs-0.*
yamcs-0.30.0
yamcs-3.*
yamcs-3.0.0
yamcs-3.1.0
yamcs-3.1.1
yamcs-3.1.2
yamcs-3.2.0
yamcs-3.2.1
yamcs-3.2.2
yamcs-3.3.0
yamcs-3.4.0
yamcs-4.*
yamcs-4.0.1
yamcs-4.1.1
yamcs-4.1.2
yamcs-4.10.0
yamcs-4.10.1
yamcs-4.10.2
yamcs-4.10.3
yamcs-4.10.4
yamcs-4.10.5
yamcs-4.10.6
yamcs-4.10.7
yamcs-4.10.8
yamcs-4.10.9
yamcs-4.2.0
yamcs-4.2.1
yamcs-4.2.2
yamcs-4.3.0
yamcs-4.3.1
yamcs-4.4.0
yamcs-4.4.1
yamcs-4.4.2
yamcs-4.7
yamcs-4.7.1
yamcs-4.7.2
yamcs-4.7.3
yamcs-4.8.0
yamcs-4.8.1
yamcs-4.9.0
yamcs-4.9.1
yamcs-4.9.2
yamcs-4.9.3
yamcs-4.9.4
yamcs-4.9.5
yamcs-5.*
yamcs-5.0.0
yamcs-5.0.1
yamcs-5.1.0
yamcs-5.1.1
yamcs-5.1.2
yamcs-5.1.3
yamcs-5.2.0
yamcs-5.3.0
yamcs-5.3.1
yamcs-5.3.2
yamcs-5.3.3
yamcs-5.3.4
yamcs-5.3.5
yamcs-5.4.0
yamcs-5.4.1
yamcs-5.4.2
yamcs-5.4.3
yamcs-5.5.0
yamcs-5.5.1
yamcs-5.5.2
yamcs-5.5.3
yamcs-5.5.4
yamcs-5.5.5
yamcs-5.5.6
yamcs-5.5.7
yamcs-5.6.0
yamcs-5.6.1
yamcs-5.6.2
yamcs-5.7.0
yamcs-5.7.1
yamcs-5.7.10
yamcs-5.7.2
yamcs-5.7.3
yamcs-5.7.4
yamcs-5.7.5
yamcs-5.7.6
yamcs-5.7.7
yamcs-5.7.8
yamcs-5.7.9
yamcs-5.8.0
yamcs-5.8.1
yamcs-5.8.2
yamcs-5.8.3
yamcs-5.8.4
yamcs-5.8.5
yamcs-5.8.6
yamcs-5.8.7
yamcs-5.8.8
yamcs-5.9.0
yamcs-5.9.1
yamcs-5.9.2
yamcs-5.9.3
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55549.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"101804812291144012076583951920432103956",
"20064107674117035066498321540670401277",
"188235009172270687297995601349671158520",
"125924737668124476358495873931128198592",
"323325196482661464230102932569696437500",
"68636981289253119246424103780397994368",
"225215103336619008542940573390292818362",
"226597268777761088062489086455144946488",
"24978253702854815174582444794650019522"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-0189f0ca",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParserConstants.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "70266192357136408710408350822187523243",
"length": 459
},
"id": "CVE-2026-55549-0898d707",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "TemplateParser"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"100963878182134835573798782213144557073",
"248342506722701290258387392553988919050",
"11207640541449260655602847239602574340",
"193267674254828166435183470923772017775"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-1447a6b8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TextStatement.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "57713437321670182427828090535084544829",
"length": 169
},
"id": "CVE-2026-55549-1e7be074",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateBody.java",
"function": "render"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "78732746311545022043002110342353169902",
"length": 81
},
"id": "CVE-2026-55549-20c5b74e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "82084685050846136246949307610086547193",
"length": 457
},
"id": "CVE-2026-55549-22abdba8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "ReInit"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279516605626165226065121185329973088741",
"length": 229
},
"id": "CVE-2026-55549-45cbacc3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java",
"function": "render"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "307815057040463612133760140581959146490",
"length": 76
},
"id": "CVE-2026-55549-46e5a495",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TextStatement.java",
"function": "render"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281215460538656722522121829805325330890",
"length": 1645
},
"id": "CVE-2026-55549-517a5706",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java",
"function": "jjMoveNfa_2"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "82601796351198946091148273477628796785",
"length": 343
},
"id": "CVE-2026-55549-5da4de9a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "ReInit"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"336105549070042037411169429758633721238",
"319665808877232021070077526308081903685",
"205627813756137053203851760048947016708",
"207721525204368341360921474905013681432",
"295368496533633202446106882203351835252",
"112343499929982506190069888090689170141",
"297757419225340821137759089705794438060",
"46291995630169421125161857692656740871",
"337471899815776112883403667221550349898",
"309832903926181149673601536118148318225",
"225105057821494000748853120570845517634",
"44348452889594252330231579452663321203",
"71976015572448975022650288857581416679",
"309564214233240720319381158945842748103",
"236822092674102124998395923301566611978",
"201897499786216302771076763627037590510",
"104796858593718542170409478321444479195",
"197071055777009741305152949515592170943",
"260313621853140056777311422012036971206",
"78632155450259338589234890371151936015",
"58616287977780477565968128082425040933",
"102205221746623805471681553482404585534",
"183904182719573590287379053321734439769",
"146661649402919268086182996502253817494",
"44203610038355524656846631508388799200",
"290842811572574893093812017077217833977",
"146648088068932663617935643110147970399",
"84833269210246039221489318845716283818",
"188139064947566684578782383182677987461",
"48074170075270580776453551186061220978",
"71521104235218598530659477626902086614",
"16579063042151934603399712998613646561",
"236822092674102124998395923301566611978",
"185455295504033065732947995795669925645",
"81165037879126227497445758374702447061",
"314476067975464700481498878268189143650",
"193858691869161732969977647756730866310",
"78632155450259338589234890371151936015",
"58616287977780477565968128082425040933",
"298121843422798048305642013867390251482",
"152450431018174068771400187769587992707",
"210077407992814815705398376847108291189",
"154732402611086866053810923950109537250",
"76228499051506877973047254475568433665",
"147060277335319851014707617120692545796",
"173409233346972146295019123270839857847",
"305521867549521799330461734434109210905",
"48074170075270580776453551186061220978",
"273834886957604886011789390547113800906",
"189035705484940896534053567046589211353",
"232798913043679171928880621564224524279",
"127959859577058017740068241599858954031",
"284330190410925741267805085960764646184",
"314457261615617105744301744694198971521",
"224932424631254672725586364621506793689",
"21304968414330263996784832797997143476",
"234752068125652818318796058608481161041",
"333092537371448964159848497297865970572",
"329813830940944588922648682588440435132",
"318775228165481678958092599814057167119",
"33746823683069165186501007384002209843",
"3184477090420924939442861723813643001",
"190626871700452796962599559549456805648",
"111862923733226741548834182367142097112",
"257503619479527876758474008482795337293",
"90551798776688790267870851876000783747",
"135586801810729432317169565469930902232",
"78948233005585232412350869610743923761",
"20928739892207191852030783098064028096",
"34031450664658614274823053204517750756",
"96906329854784824465195679706537922171",
"191531357102317179275049018859480045104",
"122000182888281643959556689514305082046",
"34628426814630789359011539625560586131",
"181585595800507948604745019371179476722",
"176559874561455807883502021901889973357",
"307874133842782614788408609377251793129",
"30685501084582925431051694943644623620",
"209894669348326887170188397933389250186",
"265338660977672109117728994771023570784",
"320330396337632574287543418339154116035",
"315440374675668458770130492224015719778",
"53127471471335822664906693856884949782",
"14475169573752177112289354955554208316"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-74daddba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "79196849801499198791606129212121133561",
"length": 267
},
"id": "CVE-2026-55549-773622af",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "TemplateParser"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "160284035300300343790410547342878024339",
"length": 273
},
"id": "CVE-2026-55549-78a7b471",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "ReInit"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "36962988896202129933136172231996646146",
"length": 2110
},
"id": "CVE-2026-55549-7b304b89",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java",
"function": "getNextToken"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "310897354362824824459951495386221594019",
"length": 1533
},
"id": "CVE-2026-55549-7f462e3b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParserTokenManager.java",
"function": "jjMoveNfa_3"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"144245011949490195171780094205528976959",
"262050766247620609071116191353614071292",
"105394629212576993593199137458120913972",
"214250836430572104259000391958774530509",
"220246268107498088443385826406630815720",
"17581219909309615049689580756956495344",
"140013100473830328165226246326119474626",
"107914244724125196886198338878637545908",
"28431768185505366525604769813657407118",
"51432960653142507801020136182429399372"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-82dfed32",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "318341910123986967839555061008152484461",
"length": 345
},
"id": "CVE-2026-55549-83094047",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "TemplateParser"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102091866649715057829556120993365092718",
"171669095154728340034778830951323950564"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-8752550e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/Statement.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"321423077349538638303668348878912693243",
"140013100473830328165226246326119474626",
"56251177336488753961599116116256166700",
"89900047242158141944903897370235475986",
"181539421469654425676074377623227886430",
"102218996743086046453440904096011569437",
"256401548523517655671689850686503493605",
"168736368470898674492112934218070405267",
"282758048488921561540676930783397364504",
"156136087694944419005303014038584327126",
"188109292902692966712661315775132773397",
"155827571077400747008174391930941752516",
"263938827729220715852826646950523513144",
"285460152407152589901742856712226328880",
"180997999034790378151979469982583009822",
"224442266711173763901687334731600886501",
"104152399390048124175212460171971247355",
"3113955353034581516571203860140230882"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-97b36b3f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/IfStatement.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"297295177720296249864148989022309737460",
"33542565468246741487399624027703822737",
"71289943260826782446942501272763280689",
"322172121783288272769141047044084329823",
"157549589361543918848433523306963068272",
"235076303389980586577231412959286573815",
"304521895614751624962418128371222850980",
"15109700393717823941322743507070393243",
"253085268688749778002089524794283159569",
"242592351596059513407336788573839764206",
"264363773136942901828550137100818466460",
"252605948202796351613114806112860091137",
"299910156289155362985570703969116749341",
"184685906468848784299646154139897171008",
"108223203599134368174210760348520233483",
"109832103440465514739693092849224868259",
"253765069487596105916137610864827953906",
"290012930359025216334270960567274487089",
"179221932174465823674676387802258987966",
"80340944855378992852822246151922016109",
"235728968988439051885374127179047168905",
"125762983109435093529808969443715172886",
"197283661987363274459709957488141151107",
"112165390597603465142786935379709258736",
"66150738005775409554975672507213778175",
"270261692255823190778090952983621697452",
"110880691191254935601868674462063946657",
"267563269724041685570440893975517523951",
"50111504850111245242623037486099433589",
"211497843122013655899135195206051427816",
"186092932463610927087075469177315865822",
"176091200347744023424355204545179596722",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"89384508629967493176254546515991510095",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"219475593470518823188329967398884184451",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"187155541759801474956716172129779244473",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"201973318962509287967763780482792124496",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"164716756426171166214837069616548177435",
"132829094636948175321532421247955852286",
"298878087735904148175758234380500719883",
"153774732534565518287320144275548868649",
"284754167859155341127146699154348490174",
"89737361754495363774439258023288132110",
"279762568240208678544427188036790372539",
"287193085683072015022621406091117691565",
"91701765104279068571068399839954626702",
"234317204801746480241564671673321470429",
"196698980264053305040533811423338946842",
"232307157693182175913217276260860442628",
"109283690884633241512863020191003609303",
"247912686864747974567494216746183434552",
"5068187545725198794672517398507559727",
"260302635436400517093619413299322054993",
"122601289960360481705328647100385773570",
"246942771534448892828448287554603607131"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-a6dd75ec",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"332159531994148654962524839196962956258",
"185800838100145598884924729411635730444",
"271481189912295691683024544139252926462",
"276591025568645858736107645775040071377",
"275602599579361690610683757263342121823",
"197209166556775174167352121554757442997",
"59910003161882992214097134088835877292"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-b3162b90",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateBody.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"101800880935952532611732838232423186765",
"306035298386758857812492674819320913265"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-b5e9efd7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/test/java/org/yamcs/templating/TemplateProcessorTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"247806208002073072914781367426254751206",
"91812618195314169688075905875262274082",
"212186918565961232407869161221795496611",
"100471946932051015290782180107767293551",
"87789039011457064450498562487112023394",
"251299359341232257879371382836989993349",
"294896081041747150052553490510516092742",
"97966737876467436519997552470170441010",
"231851583986734300745991121674142621925",
"243898320524959388395183136758649261507",
"22207182862757203782774204754798647667",
"308328434577700684533584153968115097069",
"208736929649137747655936606186474153374",
"160818838221991073989764993484686479942",
"76483337315584592548161071373833598522"
],
"threshold": 0.9
},
"id": "CVE-2026-55549-b87f3d86",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "199840331207602835567077352966656613884",
"length": 190
},
"id": "CVE-2026-55549-ba0c692a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateProcessor.java",
"function": "TemplateProcessor"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "264485507365680111644307624602119968216",
"length": 80
},
"id": "CVE-2026-55549-bd682605",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "jj_la1_init_0"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "80665898778293974665598667639492389776",
"length": 467
},
"id": "CVE-2026-55549-cd188416",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/IfStatement.java",
"function": "render"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "31234179178587685993139208239620556275",
"length": 233
},
"id": "CVE-2026-55549-d033dc1d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "varStatement"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "175015197842419354926459627360326746992",
"length": 883
},
"id": "CVE-2026-55549-f16649c2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "ifStatement"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312927393610462170414232955454073023907",
"length": 805
},
"id": "CVE-2026-55549-fe569220",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/templating/TemplateParser.java",
"function": "generateParseException"
}
}
]
vanir_signatures_modified
"2026-09-10T08:13:51Z"