Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/yard@0.9.36
purl pkg:gem/yard@0.9.36
Next non-vulnerable version 0.9.42
Latest non-vulnerable version 0.9.42
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fwue-vswy-3fer
Aliases:
CVE-2026-41493
GHSA-3jfp-46x4-xgfj
YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP requests to access arbitrary files on the machine of a yard server host under certain conditions. This issue has been patched in version 0.9.42.
0.9.42
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ed6k-yw87-s3cw CVE-2024-27285
GHSA-8mq4-9jjh-9xrc

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T22:09:17.654082+00:00 GitLab Importer Affected by VCID-fwue-vswy-3fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2026-41493.yml 38.6.0
2026-06-12T15:48:14.018067+00:00 GitLab Importer Fixing VCID-ed6k-yw87-s3cw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/yard/CVE-2024-27285.yml 38.6.0
2026-06-12T07:41:58.212517+00:00 GithubOSV Importer Fixing VCID-ed6k-yw87-s3cw https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-8mq4-9jjh-9xrc/GHSA-8mq4-9jjh-9xrc.json 38.6.0
2026-06-11T20:34:04.513206+00:00 GHSA Importer Fixing VCID-ed6k-yw87-s3cw https://github.com/advisories/GHSA-8mq4-9jjh-9xrc 38.6.0