Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | yard | 0.9.24-1+deb11u1 |
| Debian · 12 | yard | 0.9.28-2+deb12u2 |
Vulnerabilities 1
-
Medium 5.4
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template…