lsegal

Products

ProductCVEsExploitedLatest
yard3–Jun 19, 2026

Exploited and recent CVEs

  • CVE-2026-49342 Medium 5.3 YARD static cache reads raw traversal paths before router sanitization 0.3%
  • CVE-2026-41493 Medium 6.9 yard: Possible arbitrary path traversal and file access via yard server 0.4%
  • CVE-2024-27285 Medium 5.4 YARD's default template vulnerable to Cross-site Scripting in generated frames.html 1.1%