lsegal/yard Security Advisories | GitStock

medium2026-06-26

YARD static cache reads raw traversal paths before router sanitization

GHSA-pxcc-8665-phx8 · CVE-2026-49342

medium2026-04-17

yard: Possible arbitrary path traversal and file access via yard server

GHSA-3jfp-46x4-xgfj · CVE-2026-41493

medium2024-02-28

YARD's default template vulnerable to Cross-site Scripting in generated frames.html

GHSA-8mq4-9jjh-9xrc · CVE-2024-27285