OESA-2021-1289 rubygem-yard security update

YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions...

CVE-2019-1020001

yard before 0.9.20 allows path traversal...

CVE-2019-1020001

CVE-2019-1020001 affects yard (Ruby documentation tool) prior to 0.9.20. The path traversal fixes appear across multiple advisories (OSV/Debian/Ubuntu), indicating Arbitrary path traversal and file access via the yard server. The connected docs confirm the affected version range and the nature of...