Lucene search
+L

3 matches found

OSV
OSV
added 2026/04/17 10:21 p.m.26 views

GHSA-3JFP-46X4-XGFJ yard: Possible arbitrary path traversal and file access via yard server

Impact A path traversal vulnerability was discovered in YARD = 0.9.41 when using yard server to serve documentation. This bug would allow unsanitized HTTP requests to access arbitrary files on the machine of a yard server host under certain conditions. The original patch in GHSA-xfhh-rx56-rxcr wa...

6.9CVSS5.9AI score0.00388EPSS
SaveExploits0References5
Rows per page
Query Builder