yard vulnerabilities

1 known vulnerability in yard from Lsegal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  yard: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-41493May 8, 2026Lsegal

  YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP requests to access arbitrary files on the machine of a yard s