Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:yelp:42.2-8:*:*:*:*:*:*:*

part: a version: 42.2-8 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductYelp (9fe26e77-57cd-57c2-a2b5-4fdbeaeddcca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gnome/yelp purl2cpe 2026-06-01 10:17:25.560936
pkg:gnome/yelp purl2cpe 2026-06-01 10:17:25.560938

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3155 vulnerable 2026-06-08 07:23:08.280281 Yelp: arbitrary file read
HIGH (7.4)
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Published: 2025-04-03T13:34:18.878Z
Updated: 2026-11-04T21:25:26.153Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.