Skip to content
OpenAdvisories

Package · Debian

yard

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-1020001

    Path Traversal vulnerability that affects yard

    yard before 0.9.20 allows path traversal.

    yard yard yard yard Debian Ubuntu RubyGems
  • High 7.5
    CVE-2017-17042

    Arbitrary file read vulnerability in yard server

    lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

    yard yard yard Debian Ubuntu RubyGems