Security: lsegal/yard
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
[v0.9.44] YARD static cache reads raw traversal paths before router sanitizationGHSA-pxcc-8665-phx8 published
May 25, 2026 by lsegalModerate -
[v0.9.41] Possible arbitrary path traversal and file access via yard serverGHSA-3jfp-46x4-xgfj published
Apr 16, 2026 by lsegalModerate -
[v0.9.35] XSS in generated frames.html of default YARD templateGHSA-8mq4-9jjh-9xrc published
Feb 28, 2024 by lsegalModerate -
[v0.9.19] Possible arbitrary path traversal and file access via `yard server`GHSA-xfhh-rx56-rxcr published
Jun 28, 2019 by lsegalModerate