Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/yard@0.9.11
purl pkg:gem/yard@0.9.11
Next non-vulnerable version 0.9.42
Latest non-vulnerable version 0.9.42
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-ed6k-yw87-s3cw
Aliases:
CVE-2024-27285
GHSA-8mq4-9jjh-9xrc
0.9.36
Affected by 1 other vulnerability.
VCID-fqzr-pn4t-zyh6
Aliases:
CVE-2019-1020001
GHSA-xfhh-rx56-rxcr
0.9.20
Affected by 2 other vulnerabilities.
VCID-fwue-vswy-3fer
Aliases:
CVE-2026-41493
GHSA-3jfp-46x4-xgfj
YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP requests to access arbitrary files on the machine of a yard server host under certain conditions. This issue has been patched in version 0.9.42.
0.9.42
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3bt7-mcww-3ug7 CVE-2017-17042
GHSA-gj4p-3wh3-2rmf

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T09:24:25.917452+00:00 Ruby Importer Affected by VCID-ed6k-yw87-s3cw https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2024-27285.yml 38.6.0
2026-06-13T09:20:21.536569+00:00 Ruby Importer Affected by VCID-fqzr-pn4t-zyh6 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2019-1020001.yml 38.6.0
2026-06-13T09:20:08.481055+00:00 Ruby Importer Fixing VCID-3bt7-mcww-3ug7 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2017-17042.yml 38.6.0
2026-06-12T22:09:17.534800+00:00 GitLab Importer Affected by VCID-fwue-vswy-3fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2026-41493.yml 38.6.0
2026-06-12T19:21:47.450201+00:00 GitLab Importer Affected by VCID-ed6k-yw87-s3cw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2024-27285.yml 38.6.0
2026-06-12T17:13:14.480738+00:00 GitLab Importer Affected by VCID-fqzr-pn4t-zyh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2019-1020001.yml 38.6.0
2026-06-12T15:40:13.518972+00:00 GitLab Importer Fixing VCID-3bt7-mcww-3ug7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2017-17042.yml 38.6.0
2026-06-12T07:52:20.464984+00:00 GithubOSV Importer Fixing VCID-3bt7-mcww-3ug7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json 38.6.0
2026-06-11T20:23:57.656355+00:00 GHSA Importer Fixing VCID-3bt7-mcww-3ug7 https://github.com/advisories/GHSA-gj4p-3wh3-2rmf 38.6.0