MEDIUMRubyGems
GHSA-3jfp-46x4-xgfj· CVE-2026-41493yard: Possible arbitrary path traversal and file access via yard server
Modified: 6/9/2026
package
pkg:rubygems/yard
yard: Possible arbitrary path traversal and file access via yard server
Modified: 6/9/2026
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Modified: 9/10/2026
Arbitrary file read vulnerability in yard server
Modified: 2/16/2024
YARD static cache reads raw traversal paths before router sanitization
Modified: 6/26/2026
Path Traversal vulnerability that affects yard
Modified: 9/10/2026