Product by Lsegal
Yard
3 known vulnerabilities in Yard (Lsegal), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-27285 | YARD's default template vulnerable to Cross-site Scripting in generated frames.html | 5.4 | |
| High | CVE-2026-41493 | yard: Possible arbitrary path traversal and file access via yard server | 7.5 | |
| Medium | CVE-2026-49342 | YARD static cache reads raw traversal paths before router sanitization | 5.3 |