Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems yard Security Advisories

Browse all Security Advisories for rubygems yard

Loading...
Moderate
GSA_kwCzR0hTQS04bXE0LTlqamgtOXhyY84AA5l2
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Ecosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: 8 months ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmaGgtcng1Ni1yeGNy
Path Traversal vulnerability that affects yard
Ecosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNHAtM3doMy0ycm1m
Arbitrary file read vulnerability in yard server
Ecosystems: rubygems
Packages: yard
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: almost 7 years ago
Statistics
Advisories: 20,408
Packages: 8,948
Repositories: 1
Ecosystems: 12
Filter by Package
actionpack 60 nokogiri 43 rubygems-update 25 puppet 23 rack 23 activerecord 21 activesupport 14 camaleon_cms 14 publify_core 14 passenger 13 puma 12 actionview 12 rails 11 decidim 11 fat_free_crm 10 rails-html-sanitizer 9 jquery-rails 9 bootstrap 9 bootstrap 9 bootstrap 9 org.webjars:bootstrap 9 twbs/bootstrap 9 jquery 8 org.webjars.npm:jquery 8 bootstrap-sass 8 jQuery.UI.Combined 7 jQuery 7 org.webjars.npm:jquery-ui 7 bootstrap.sass 7 jquery-ui-rails 7 jquery-ui 7 org.jruby:jruby-stdlib 7 loofah 6 rexml 6 ember-source 6 doorkeeper 6 katello 6 spree_auth_devise 5 grpcio 5 grpc 5 sidekiq 5 spree 5 bundler 5 bootstrap-sass 5 webrick 5 commonmarker 5 ruby-saml 4 fluentd 4 mail 4 sanitize 4 carrierwave 4 activestorage 4 avo 4 sinatra 4 devise 4 rails_admin 4 dragonfly 4 rubyzip 3 git 3 openssl 3 rack-cors 3 rest-client 3 json-jwt 3 openc3 3 io.grpc:grpc-protobuf 3 rdoc 3 decidim-admin 3 chartkick 3 yard 3 spina 3 decidim-core 3 resque 3 activeadmin 3 gollum 3 google-protobuf 3 com.google.protobuf:protobuf-kotlin 3 com.google.protobuf:protobuf-java 3 devise-two-factor 3 omniauth 3 actiontext 3 cgi 3 geminabox 3 phlex 3 private_address_check 3 secure_headers 2 solidus_core 2 qiita-markdown 2 decidim-templates 2 omniauth-facebook 2 i18n 2 administrate 2 omniauth-saml 2 openc3 2 uri 2 actionmailer 2 safemode 2 kaminari 2 faye 2 kramdown 2 paperclip 2 json 2 org.webjars.npm:bootstrap 2 mini_magick 2 @openc3/tool-common 2 facter 2 radiant 2 httparty 2 VladTheEnterprising 2 pghero 2 bson 2 sup 2 twitter-bootstrap-rails 2 redcarpet 2 net-ldap 2 view_component 2 field_test 2 user_agent_parser 2 logstash-core 2 pyarrow 2 sprockets 2 mechanize 2 pageflow 2 red-arrow 2 pdfkit 2 sidekiq-unique-jobs 2 ruby-openid 2 cocoapods-downloader 2 mapbox-rails 2 mapbox.js 2 yajl-ruby 2 com.google.protobuf:protobuf-javalite 2 echor 2 git-fastclone 2 com.google.protobuf:protobuf-kotlin-lite 2 ox 2 solidus_frontend 2 sqlite-vec 1 image_processing 1 sqlite-vec 1 encoded_id-rails 1 text_helpers 1 stringio 1 easymon 1 Bootstrap.Less 1 django 1 strong_password 1 datagrid 1 iodine 1 jquery 1 activeresource 1 faye-websocket 1 time 1 turbo_boost-commands 1 @turbo-boost/commands 1 rotp 1 gtk2 1 ruby-mysql 1 rubocop 1 trix 1 decidim-meetings 1 csv-safe 1 Autolab 1 netaddr 1 minitar 1 archive-tar-minitar 1 kubeclient 1 stimulus_reflex 1 stimulus_reflex 1 smashing 1 omniauth-weibo-oauth2 1 ccsv 1 authlogic 1 show_in_browser 1 active_attr 1 gitaly 1 sqlite-vec 1 sqlite-vec 1 fog-dragonfly 1 rake 1 RedCloth 1 kitchen-terraform 1 apollo_upload_server 1 uap-core 1 bibtex-ruby 1 handlebars 1 bootstrap-wysihtml5-rails 1 ruby_parser-legacy 1 haml 1 simple_form 1 sisimai 1 exiftool_vendored 1 globalid 1 simple_captcha2 1 uglify-js 1 marginalia 1 uglifier 1 paratrooper-pingdom 1 sfpagent 1 ldoce 1 mysql-binuuid-rails 1