CVE-2007-5837: Yarssr

Medium severity, CVSS 6.8. EPSS: 6.2% chance of exploitation in the next 30 days.

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.

Affected products

• Yarssr Yarssr: version 0.2.2 only

Published 2007-11-05. Last modified 2026-06-16.