GCVE-110-MAGEIA-2026-296

Advisory Published

Vulnetix · Advisory published July 25, 2026

The updated packages fix a security vulnerability: Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications. (CVE-2026-13601)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	yelp	0 (affected), 49.0-2.1.mga10 (unaffected)	—
Mageia	yelp	0 (affected), 42.2-1.2.mga9 (unaffected)	—

References

Updated yelp packages fix a security vulnerability

advisory

Updated yelp packages fix a security vulnerability

issue

Updated yelp packages fix a security vulnerability

url

Updated yelp packages fix a security vulnerability

url

Updated yelp packages fix a security vulnerability

url

Browse GCVE Records

67,407 records in the GCVE database · Updated August 11, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON