VYPR

yelp-xsl

by Debian

CVEs (1)

  • CVE-2026-13601Jun 30, 2026
    risk 0.00cvss epss

    A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG…