MEDIUMRubyGems
GHSA-3jfp-46x4-xgfj· CVE-2026-41493yard: Possible arbitrary path traversal and file access via yard server
Modified: 6/9/2026
package
RubyGems/yard
pkg:rubygems/yard
MEDIUM5.4RubyGems
GHSA-8mq4-9jjh-9xrc· CVE-2024-27285YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Modified: 9/10/2026
HIGH7.5RubyGems
GHSA-gj4p-3wh3-2rmf· CVE-2017-17042Arbitrary file read vulnerability in yard server
Modified: 2/16/2024
MEDIUM5.3RubyGems
GHSA-pxcc-8665-phx8· CVE-2026-49342YARD static cache reads raw traversal paths before router sanitization
Modified: 6/26/2026
HIGH7.5RubyGems
GHSA-xfhh-rx56-rxcr· CVE-2019-1020001Path Traversal vulnerability that affects yard
Modified: 9/10/2026