Skip to content

CVE-2026-13601

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

7.1 HighFix available

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.18%Unchanged since Jun 30, 2026

What each source reports

CVE List Score used 7.1

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: CVE-2026-13601
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-693, CWE-693
Updated: 2026-11-04

EUVDEUVD-2026-40066 7.1

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: EUVD-2026-40066
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-04

GitHub AdvisoriesGHSA-f4vh-qr53-q5gv 7.1

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation...

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: GHSA-f4vh-qr53-q5gv
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-693
Updated: 2026-11-02

NVD 7.1

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: CVE-2026-13601
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-693
Updated: 2026-11-04

OSV 7.1

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: CVE-2026-13601
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-693
Updated: 2026-11-06

OSVDEBIAN-CVE-2026-13601 6.5

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: DEBIAN-CVE-2026-13601
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-05

Show 24 moreShow less

OSVOESA-2026-3053 7.1

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.(CVE-2026-13601)

Record: OESA-2026-3053
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:47177 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:47177
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:47178 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:47178
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54539 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54539
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54540 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54540
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54605 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54605
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54624 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54624
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54637 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54637
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:54666 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:54666
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:57417 7.1

Red Hat Security Advisory: yelp security update

Record: RHSA-2026:57417
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRLSA-2026:47177 7.1

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47177
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVRLSA-2026:47178 7.1

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47178
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-13601 7.1

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.

Record: UBUNTU-CVE-2026-13601
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-02

OSVALSA-2026:47177 No score

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47177
Updated: 2026-11-02

OSVALSA-2026:47178 No score

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47178
Updated: 2026-11-02

OSVCLSA-2026-1783700414 No score

yelp: Fix of CVE-2026-13601

CVE-2026-13601: fix loading external resources and ghelp:/proc URIs from web pages

Record: CLSA-2026-1783700414
Updated: 2026-11-02

OSVCLSA-2026-1784539549 No score

yelp: Fix of CVE-2026-13601

fix CVE-2026-13601

Record: CLSA-2026-1784539549
Updated: 2026-11-02

OSVMGASA-2026-0296 No score

Updated yelp packages fix a security vulnerability

The updated packages fix a security vulnerability: Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications. (CVE-2026-13601)

Record: MGASA-2026-0296
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21295-1 No score

Security update for yelp

This update for yelp fixes the following issue

CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).

Record: openSUSE-SU-2026:21295-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22625-1 No score

Security update for yelp

This update for yelp fixes the following issue

CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).

Record: SUSE-SU-2026:22625-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3035-1 No score

Security update for yelp

This update for yelp fixes the following issue

CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).

Record: SUSE-SU-2026:3035-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3036-1 No score

Security update for yelp

This update for yelp fixes the following issue

CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).

Record: SUSE-SU-2026:3036-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3037-1 No score

Security update for yelp

This update for yelp fixes the following issue

CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak applications (bsc#1269625).

Record: SUSE-SU-2026:3037-1
Updated: 2026-11-02

OSVUSN-8627-1 No score

yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a user into opening a specially crafted document, possibly resulting in the disclosure of sensitive information.

Record: USN-8627-1
Updated: 2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`yelp` AlmaLinux:8	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-devel` AlmaLinux:8	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-libs` AlmaLinux:8	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp` AlmaLinux:9	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-devel` AlmaLinux:9	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-libs` AlmaLinux:9	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp` TuxCare:AlmaLinux:9.2	before 2:40.3-2.el9_2.tuxcare.els2	2:40.3-2.el9_2.tuxcare.els2
`yelp-devel` TuxCare:AlmaLinux:9.2	before 2:40.3-2.el9_2.tuxcare.els2	2:40.3-2.el9_2.tuxcare.els2
`yelp-libs` TuxCare:AlmaLinux:9.2	before 2:40.3-2.el9_2.tuxcare.els2	2:40.3-2.el9_2.tuxcare.els2
`yelp` TuxCare:AlmaLinux:9.6	before 2:40.3-2.el9_6.1.tuxcare.els1	2:40.3-2.el9_6.1.tuxcare.els1

Show 108 moreShow less

Affected packages
Package	Affected	Fixed
`yelp-devel` TuxCare:AlmaLinux:9.6	before 2:40.3-2.el9_6.1.tuxcare.els1	2:40.3-2.el9_6.1.tuxcare.els1
`yelp-libs` TuxCare:AlmaLinux:9.6	before 2:40.3-2.el9_6.1.tuxcare.els1	2:40.3-2.el9_6.1.tuxcare.els1
`yelp` Debian:12	before 42.2-1+deb12u2, plus listed versions 42.2-142.2-1+deb12u1	42.2-1+deb12u2
`yelp` Debian:13	before 42.2-4+deb13u1, plus listed versions 42.2-4	42.2-4+deb13u1
`yelp` Debian:14	before 49.1-1, plus listed versions 42.2-442.3-142.3-242.3-349.0-1 Show 5 moreShow less 49.0-249.0-349.0-449.0-549~rc-1	49.1-1
`yelp` Mageia:10	before 49.0-2.1.mga10	49.0-2.1.mga10
`yelp` Mageia:9	before 42.2-1.2.mga9	42.2-1.2.mga9
`yelp` openEuler:20.03-LTS-SP4	before 3.36.0-3.oe2003sp4	3.36.0-3.oe2003sp4
`yelp` openEuler:22.03-LTS-SP4	before 3.38.3-3.oe2203sp4	3.38.3-3.oe2203sp4
`yelp` openEuler:24.03-LTS-SP1	before 42.2-4.oe2403sp1	42.2-4.oe2403sp1
`yelp` openEuler:24.03-LTS-SP3	before 42.2-4.oe2403sp3	42.2-4.oe2403sp3
`yelp` openEuler:24.03-LTS-SP4	before 42.3-2.oe2403sp4	42.3-2.oe2403sp4
`yelp` Red Hat:enterprise_linux:8::appstream	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-debuginfo` Red Hat:enterprise_linux:8::appstream	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-debugsource` Red Hat:enterprise_linux:8::appstream	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-libs` Red Hat:enterprise_linux:8::appstream	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-libs-debuginfo` Red Hat:enterprise_linux:8::appstream	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-debuginfo` Red Hat:enterprise_linux:8::crb	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-debugsource` Red Hat:enterprise_linux:8::crb	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-devel` Red Hat:enterprise_linux:8::crb	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp-libs-debuginfo` Red Hat:enterprise_linux:8::crb	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp` Red Hat:enterprise_linux:9::appstream	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-debuginfo` Red Hat:enterprise_linux:9::appstream	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-debugsource` Red Hat:enterprise_linux:9::appstream	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-libs` Red Hat:enterprise_linux:9::appstream	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-libs-debuginfo` Red Hat:enterprise_linux:9::appstream	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-debuginfo` Red Hat:enterprise_linux:9::crb	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-debugsource` Red Hat:enterprise_linux:9::crb	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-devel` Red Hat:enterprise_linux:9::crb	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp-libs-debuginfo` Red Hat:enterprise_linux:9::crb	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp` Red Hat:rhel_eus:9.6::appstream	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-debugsource` Red Hat:rhel_eus:9.6::appstream	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-libs` Red Hat:rhel_eus:9.6::appstream	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-libs-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-debuginfo` Red Hat:rhel_eus:9.6::crb	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-debugsource` Red Hat:rhel_eus:9.6::crb	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-devel` Red Hat:rhel_eus:9.6::crb	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp-libs-debuginfo` Red Hat:rhel_eus:9.6::crb	before 2:40.3-2.el9_6.2	2:40.3-2.el9_6.2
`yelp` Red Hat:rhel_e4s:9.4::appstream	before 2:40.3-2.el9_4.2	2:40.3-2.el9_4.2
`yelp-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 2:40.3-2.el9_4.2	2:40.3-2.el9_4.2
`yelp-debugsource` Red Hat:rhel_e4s:9.4::appstream	before 2:40.3-2.el9_4.2	2:40.3-2.el9_4.2
`yelp-libs` Red Hat:rhel_e4s:9.4::appstream	before 2:40.3-2.el9_4.2	2:40.3-2.el9_4.2
`yelp-libs-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 2:40.3-2.el9_4.2	2:40.3-2.el9_4.2
`yelp` Red Hat:rhel_aus:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-debugsource` Red Hat:rhel_aus:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-libs` Red Hat:rhel_aus:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-libs-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp` Red Hat:rhel_eus_long_life:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-libs` Red Hat:rhel_eus_long_life:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp-libs-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 2:3.28.1-3.el8_4.2	2:3.28.1-3.el8_4.2
`yelp` Red Hat:rhel_e4s:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-debuginfo` Red Hat:rhel_e4s:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-debugsource` Red Hat:rhel_e4s:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-libs` Red Hat:rhel_e4s:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-libs-debuginfo` Red Hat:rhel_e4s:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp` Red Hat:rhel_tus:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-debuginfo` Red Hat:rhel_tus:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-debugsource` Red Hat:rhel_tus:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-libs` Red Hat:rhel_tus:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp-libs-debuginfo` Red Hat:rhel_tus:8.8::appstream	before 2:3.28.1-3.el8_8.2	2:3.28.1-3.el8_8.2
`yelp` Red Hat:rhel_e4s:9.2::appstream	before 2:40.3-2.el9_2.2	2:40.3-2.el9_2.2
`yelp-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 2:40.3-2.el9_2.2	2:40.3-2.el9_2.2
`yelp-debugsource` Red Hat:rhel_e4s:9.2::appstream	before 2:40.3-2.el9_2.2	2:40.3-2.el9_2.2
`yelp-libs` Red Hat:rhel_e4s:9.2::appstream	before 2:40.3-2.el9_2.2	2:40.3-2.el9_2.2
`yelp-libs-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 2:40.3-2.el9_2.2	2:40.3-2.el9_2.2
`yelp` Red Hat:rhel_aus:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-debugsource` Red Hat:rhel_aus:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-libs` Red Hat:rhel_aus:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-libs-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp` Red Hat:rhel_eus_long_life:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-libs` Red Hat:rhel_eus_long_life:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp-libs-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 2:3.28.1-3.el8_6.2	2:3.28.1-3.el8_6.2
`yelp` Red Hat:rhel_els:7	before 2:3.28.1-2.el7_9	2:3.28.1-2.el7_9
`yelp-debuginfo` Red Hat:rhel_els:7	before 2:3.28.1-2.el7_9	2:3.28.1-2.el7_9
`yelp-libs` Red Hat:rhel_els:7	before 2:3.28.1-2.el7_9	2:3.28.1-2.el7_9
`yelp-devel` Red Hat:rhel_els:7	before 2:3.28.1-2.el7_9	2:3.28.1-2.el7_9
`yelp` Rocky Linux:8	before 2:3.28.1-3.el8_10.2	2:3.28.1-3.el8_10.2
`yelp` Rocky Linux:9	before 2:40.3-3.el9_8.1	2:40.3-3.el9_8.1
`yelp` SUSE:Linux Enterprise Server 16.0	before 42.3-160000.3.1	42.3-160000.3.1
`yelp` SUSE:Linux Enterprise Server for SAP applications 16.0	before 42.3-160000.3.1	42.3-160000.3.1
`yelp` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 3.20.1-7.6.1	3.20.1-7.6.1
`yelp` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 3.20.1-7.6.1	3.20.1-7.6.1
`yelp` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7	before 42.2-150600.3.6.1	42.2-150600.3.6.1
`yelp` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 42.2-150600.3.6.1	42.2-150600.3.6.1
`yelp` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 42.2-150600.3.6.1	42.2-150600.3.6.1
`yelp` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise Server 15 SP5-LTSS	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` SUSE:Linux Enterprise Server for SAP Applications 15 SP5	before 41.2-150400.3.6.1	41.2-150400.3.6.1
`yelp` Ubuntu:Pro:16.04:LTS	before 3.18.1-1ubuntu4+esm1, plus listed versions 3.16.1-1ubuntu13.16.1-1ubuntu23.18.1-1ubuntu23.18.1-1ubuntu33.18.1-1ubuntu4	3.18.1-1ubuntu4+esm1
`yelp` Ubuntu:Pro:18.04:LTS	before 3.26.0-1ubuntu2+esm1, plus listed versions 3.26.0-1ubuntu13.26.0-1ubuntu2	3.26.0-1ubuntu2+esm1
`yelp` Ubuntu:Pro:20.04:LTS	before 3.36.2-0ubuntu1.1+esm1, plus listed versions 3.34.0-13.36.0-13.36.2-0ubuntu13.36.2-0ubuntu1.1	3.36.2-0ubuntu1.1+esm1
`yelp` Ubuntu:22.04:LTS	before 42.1-1ubuntu0.2, plus listed versions 40.stable-1build141.1-141.2-142~beta-242.0-142.1-142.1-1ubuntu0.1	42.1-1ubuntu0.2
`yelp` Ubuntu:24.04:LTS	before 42.2-1ubuntu0.24.04.2, plus listed versions 42.2-142.2-1build142.2-1build242.2-1ubuntu0.24.04.1	42.2-1ubuntu0.24.04.2
`yelp` Ubuntu:25.10	All versions, plus listed versions 42.2-242.2-442.2-4build142.3-142.3-3ubuntu1	None known
`yelp` Ubuntu:26.04:LTS	before 49.0-5ubuntu0.1, plus listed versions 42.3-3ubuntu149.0-449.0-5	49.0-5ubuntu0.1
`yelp` openSUSE:Leap 16.0	before 42.3-160000.3.1	42.3-160000.3.1

History

History
Recorded	Changed	Sources
Nov 4, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-13601 is a high vulnerability (CVSS 7.1) in Gnome Yelp, published June 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in yelp 2:3.28.1-3.el8_10.2.

References

Show 44 moreShow less