Red Hat Security Advisory

RHSA-2026:54637

yelp security update

Released 2026-08-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) yelp-2:40.3-2.el9_2.2, yelp-libs-2:40.3-2.el9_2.2

TI-2026-11522 CVE-2026-13601 · GHSA-f4vh-qr53-q5gv

LOW 30

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00179 Published 2026-06-29 Partial fix · 2:3.28.1-2.el7_9, 2:3.28.1-3.el8_10.2 +7 CWE-693