Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 43 yq Important Cross-Site Scripting Vuln 2026-990cdd8329

fedora
Calendar Grey July 17, 2026
Scroller Fedora
Update for Fedora 43 addresses important security issue in yq, fixing potential cross-site scripting vulnerabilities.
Update to 4.53.3

Summary

Yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties

processor.

Update Information:

Update to 4.53.3

Topics%20covered

Topics Covered

security advisory fedora cross site scripting arbitrary code execution important yq

Change Log

* Tue Jul 14 2026 Mikel Olasagasti Uranga - 4.53.3-1 - Update to 4.53.3 and add packit integration * Tue Feb 3 2026 Maxwell G - 4.47.1-5 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Sat Jan 17 2026 Fedora Release Engineering - 4.47.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sáez - 4.47.1-3 - rebuild

References


[ 1 ] Bug #2495328 - CVE-2026-25681 yq: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2495328

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-990cdd8329' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: yq
Product: Fedora 43
Version: 4.53.3
Release: 1.fc43
URL: https://github.com/mikefarah/yq
Summary: Yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor

Topics%20covered

Topics Covered

security advisory fedora cross site scripting arbitrary code execution important yq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.