Red Hat Security Advisory

RHSA-2026:47177

yelp security update

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) yelp-2:3.28.1-3.el8_10.2, yelp-libs-2:3.28.1-3.el8_10.2
Red Hat Enterprise Linux CRB (v. 8) yelp-devel-2:3.28.1-3.el8_10.2

TI-2026-11522 CVE-2026-13601 · GHSA-f4vh-qr53-q5gv

LOW 30

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00179 Published 2026-06-29 Partial fix · 2:3.28.1-2.el7_9, 2:3.28.1-3.el8_10.2 +7 CWE-693