lsegal
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| yard | 3 | – | Jun 19, 2026 |
Exploited and recent CVEs
- CVE-2026-49342 YARD static cache reads raw traversal paths before router sanitization 0.3%
- CVE-2026-41493 yard: Possible arbitrary path traversal and file access via yard server 0.4%
- CVE-2024-27285 YARD's default template vulnerable to Cross-site Scripting in generated frames.html 1.1%