https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T03:26:14.522300+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-3155 CVE-2025-3155 — Yelp: arbitrary file read 2026-10-08T03:26:14.564397+00:00

Affected: yelp, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support and 6 more

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

 https://vulnerability.circl.lu/vuln/usn-7447-1 USN-7447-1 — yelp, yelp-xsl vulnerability 2026-10-08T03:26:14.564559+00:00

Affected: Ubuntu:20.04:LTS: yelp, Ubuntu:20.04:LTS: yelp-xsl, Ubuntu:22.04:LTS: yelp, Ubuntu:22.04:LTS: yelp-xsl, Ubuntu:24.04:LTS: yelp, Ubuntu:24.04:LTS: yelp-xsl

It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.