A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade yelp-develUpgrade yelpUpgrade yelp-libs | Aug 6, 2026 | Jul 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade yelpUpgrade yelp-debuginfoUpgrade yelp-develUpgrade yelp-libs | Jul 22, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade yelp | Jun 30, 2026 | Jun 30, 2026 |
| Redhat_linux | — | No solution existsUpgrade yelpUpgrade yelp-libsUpgrade yelp-libs-debuginfoUpgrade yelp-debugsourceUpgrade yelp-develUpgrade yelp-debuginfo | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade yelp-debuginfoUpgrade yelp-develUpgrade yelp-libsUpgrade yelp-debugsourceUpgrade yelpUpgrade yelp-libs-debuginfo | Aug 5, 2026 | Aug 3, 2026 |
| Ubuntu | — | Upgrade libyelp0 (Ubuntu Pro)Upgrade yelp (Ubuntu Pro)Upgrade libyelp0Upgrade yelpUpgrade libyelp-1-0 | Aug 12, 2026 | Aug 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub