YA
Product
yard
by lsegal · last CVE Jun 19, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add yard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41493
7.5
0%
May 8
yard: Possible arbitrary path traversal and file access via yard server
Affected: < 0.9.42
CVE-2026-49342
5.3
0%
Jun 19
YARD static cache reads raw traversal paths before router sanitization
Affected: < 0.9.44
Showing 2