Critical Security Update for Yelp Package: CVE-2026-13601
Summary
RHSA-2026:57417: Red Hat Security Advisory: yelp security update. Affects yelp versions < 2:3.28.1-2.el7_9. Fixed in 2:3.28.1-2.el7_9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Yelp is a help viewer for GNOME, providing users with access to documentation and help files. It is a crucial component for users seeking assistance with various applications within the GNOME desktop environment. The package is designed to be user-friendly and integrates seamlessly with other GNOME applications. However, it has been identified to have a security vulnerability that could potentially expose sensitive information.
Vulnerability Detail
The vulnerability identified as CVE-2026-13601 affects the Yelp package, allowing unauthorized access to sensitive information due to improper handling of user input. This flaw could lead to information disclosure, where an attacker could exploit the vulnerability to gain access to confidential data. The issue arises from insufficient validation of input data, making it critical for users to apply the necessary updates to mitigate potential risks.
How To Fix
Minimum fixed version
2:3.28.1-2.el7_9
This is the first release that contains the fix.
sudo dnf update yelpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected application or disable it until the update is applied. However, the best course of action is to update the package as soon as possible to eliminate the vulnerability.
Conclusion
The Yelp package has a critical vulnerability (CVE-2026-13601) that requires immediate attention. Users are advised to update to the patched version to protect against potential information disclosure. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for yelp →
FAQ
CVE-2026-13601 is a security vulnerability in the Yelp package that could allow unauthorized access to sensitive information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you cannot update the package immediately, consider restricting access to the Yelp application as a temporary workaround.
Failing to address this vulnerability could lead to unauthorized access to sensitive information, potentially compromising user data and system integrity.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:57417.json.
Related vulnerabilities
Recent vulnerabilities recorded for yelp.
