RubyGems CVE Archive

yard CVE Vulnerabilities

All known CVEs affecting yard. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-49342
YARD static cache reads raw traversal paths before router sanitization
Medium
CVE-2024-27285
YARD's default template vulnerable to Cross-site Scripting in generated…
Medium
CVE-2019-1020001
Path Traversal vulnerability that affects yard
High
CVE-2017-17042
Arbitrary file read vulnerability in yard server
High

Prioritize yard vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo