YA
Product
yard
by lsegal · last CVE Jun 19, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add yard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-27285
6.1
1%
Feb 28
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Affected: < 0.9.36
CVE-2026-49342
5.3
0%
Jun 19
YARD static cache reads raw traversal paths before router sanitization
Affected: < 0.9.44
Showing 2