yard
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| YARD's default template vulnerable to Cross-site Scripting in generated frames.html | Red Hat Satellite 6/foreman-installerRed Hat Satellite 6/satellite-capsule:el8/foreman-installer | Red HatRubyGems | Medium | Fix reported | |
| Path Traversal vulnerability that affects yard | yard | RubyGems | High | Fix reported | |
| YARD static cache reads raw traversal paths before router sanitization | yard | RubyGems | Medium | Fix reported | |
| yard: Possible arbitrary path traversal and file access via yard server | Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 | Red HatRubyGems | Medium | Fix reported | |
| Arbitrary file read vulnerability in yard server | Red Hat Enterprise MRG 2/rubygem-yardRed Hat Subscription Asset Manager/rubygem-yard | Red HatRubyGems | High | Fix reported |