Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: yelp-xsl

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2025-3155
6.5 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): NONE
  • Availability impact (A): NONE
created 6 months ago
Yelp: arbitrary file read

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

References

Affected products

yelp
  • <42.2-8
  • *
yelp-xsl
  • *

Matching in nixpkgs

pkgs.yelp

Help viewer for GNOME

  • nixos-unstable -

pkgs.yelp-xsl

Yelp's universal stylesheets for Mallard and DocBook

  • nixos-unstable -

pkgs.yelp-tools

Small programs that help you create, edit, manage, and publish your Mallard or DocBook documentation

  • nixos-unstable -

Package maintainers