Known vulnerabilities in YARD
Vendor:
lsegal
Software:
YARD
Software CPE:
cpe:2.3:a:lsegal:yard:*:*:*:*:*:rubygems:*:*
Website:
https://github.com/lsegal
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
0.9.45
0.9.44
0.9.43
0.9.42
0.9.41
0.9.40
0.9.39
0.9.38
0.9.37
0.9.36
0.9.35
0.9.34
0.9.33
0.9.32
0.9.31
0.9.30
0.9.29
0.9.28
0.9.27
0.9.26
0.9.25
0.9.24
0.9.23
0.9.22
0.9.21
0.9.20
0.9.19
0.9.18
0.9.17
0.9.16
0.9.15
0.2.3.1
0.9.14
0.9.13
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.7.6
0.8.7.5
0.8.7.4
0.8.7.3
0.8.7.2
0.8.7.1
0.8.7
0.8.6.2
0.8.6.1
0.8.6
0.8.5.2
0.8.5.1
0.8.5
0.8.4.1
0.8.4
0.8.3
0.8.2.1
0.8.2
0.8.1
0.8.0
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.1p1
0.5.0
0.4.0
0.2.3.5
0.2.3.4
0.2.3.3
0.2.3.2
0.2.3
0.2.2
0.2.1
0.2.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132274 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-49342 |
CWE-22 | Medium | 0.9.44 | 25.05.2026 |
SB2026052536 SB2026070622 SB2026070623 |
||
| #VU126592 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-41493 |
CWE-22 | Medium | 0.9.42 | 20.04.2026 |
SB20260420112 SB2026061942 SB2026061943 and 4 more |
||
| #VU87783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27285 |
CWE-79 | Low | 0.9.36 | 25.03.2024 |
SB2024032538 SB2024032539 SB2024032545 and 1 more |
||
| #VU126591 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-1020001 |
CWE-22 | Medium | 0.9.20 | 28.06.2019 |
SB2019062822 SB2021073112 |