`yard`

Ecosystem:
rubygems

Package URL:
pkg:gem/yard

Total PRs:
101 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
86 repositories

Unique Repos (30 days):
2 repositories

Security Advisories

yard: Possible arbitrary path traversal and file access via yard server

GHSA-3jfp-46x4-xgfj CVE-2026-41493 MODERATE published 2 months ago • updated 8 days ago

### Impact A path traversal vulnerability was discovered in YARD <= 0.9.41 when using yard server to serve documentation. This bug would allow uns...

Path Traversal vulnerability that affects yard

GHSA-xfhh-rx56-rxcr CVE-2019-1020001 HIGH published almost 7 years ago • updated about 8 hours ago

## Possible arbitrary path traversal and file access via `yard server` ### Impact A path traversal vulnerability was discovered in YARD <= 0.9.19...

Arbitrary file read vulnerability in yard server

GHSA-gj4p-3wh3-2rmf CVE-2017-17042 HIGH published over 8 years ago • updated about 8 hours ago

`lib/yard/core_ext/file.rb` in the server in YARD before 0.9.11 does not block relative paths with an initial `../` sequence, which allows attacker...

YARD's default template vulnerable to Cross-site Scripting in generated frames.html

GHSA-8mq4-9jjh-9xrc CVE-2024-27285 MODERATE published over 2 years ago • updated 10 days ago

### Summary The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps-dev): bump the bundler-dependencies group across 1 directory with 3 updates

huwd/api_adaptor #87

0.9.43 → 0.9.44 Patch PR

Open 5 days ago 2 comments

Bump the bundler group across 1 directory with 18 updates

yuuki2014/shiroichizu #217

0.9.38 → 0.9.42 Patch PR

Closed 9 days ago 1 comment

Bump the minor-and-patch group across 1 directory with 17 updates

dduugg/tapioca #74

0.9.38 → 0.9.43 Patch PR

Closed about 1 month ago 2 comments

Bump yard from 0.9.36 to 0.9.42

openaustralia/planningalerts #2042

0.9.36 → 0.9.42 Patch PR

Closed about 2 months ago 10 comments

Build(deps-dev): Bump yard from 0.9.37 to 0.9.43

sakazuki-org/sakazuki #1242

0.9.37 → 0.9.43 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump the dev-dependencies group with 16 updates

Coursemology/coursemology2 #8337

0.9.42 → 0.9.43 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the bundler group across 1 directory with 3 updates

cbroult/erb-processor #65

0.9.38 → 0.9.42 Patch PR

Closed about 2 months ago 1 comment

build(deps): Bump yard from 0.9.38 to 0.9.41

Mattlk13/octobox #892

0.9.38 → 0.9.41 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump yard from 0.9.38 to 0.9.41

IceDragon200/mruby #86

0.9.38 → 0.9.41 Patch PR

Closed about 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.43

inat-get/is-boolean #4

0.9.38 → 0.9.43 Patch PR

Closed about 2 months ago 1 comment

Bump yard from 0.9.40 to 0.9.43

ykominami/mdextab #128

0.9.40 → 0.9.43 Patch PR

Closed about 2 months ago 2 comments

Bump yard from 0.9.42 to 0.9.43

ykominami/rsstsvop #126

0.9.42 → 0.9.43 Patch PR

Closed about 2 months ago 2 comments

deps(deps): Bump the development group with 2 updates

patrick204nqh/gem-ci #98

0.9.40 → 0.9.43 Patch PR

Open about 2 months ago 1 comment

Bump yard from 0.9.41 to 0.9.42

mlibrary/nebula #985

0.9.41 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

build(deps-dev): bump yard from 0.9.38 to 0.9.42

dougyouch/dynamic-active-model #11

0.9.38 → 0.9.42 Patch PR

Open 2 months ago 1 comment

chore(deps-dev): bump yard from 0.9.38 to 0.9.42 in the bundler group across 1 directory

doerfli/reeper #834

0.9.38 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.39 to 0.9.42

yannis/kasaharacup #1131

0.9.39 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.41 to 0.9.42

yegor256/telepost #152

0.9.41 → 0.9.42 Patch PR

Open 2 months ago 4 comments

chore(deps-dev): bump yard from 0.9.37 to 0.9.42

imagekit-developer/imagekit-ruby #76

0.9.37 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.42 in the bundler group across 1 directory

ykominami/rsstsvop #124

0.9.38 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.37 to 0.9.42 in the bundler group across 1 directory

evolve75/RubyTree #127

0.9.37 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.37 to 0.9.42

HamstringAssassin/danger-spelling #22

0.9.37 → 0.9.42 Patch PR

Open 2 months ago 2 comments

chore(deps-dev): bump yard from 0.9.37 to 0.9.42

Coursemology/coursemology2 #8306

0.9.37 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.36 to 0.9.42

hackclub/yellow_pages #81

0.9.36 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.34 to 0.9.42

SkyN9ne/CocoaPods #3

0.9.34 → 0.9.42 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.42

ykominami/simpleoptparse #147

0.9.38 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.42

fnf-org/TicketBooth #561

0.9.38 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.42

Cyberwatch/faker #50

0.9.38 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Build(deps-dev): Bump yard from 0.9.41 to 0.9.42

evemonk/evemonk #7759

0.9.41 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.37 to 0.9.42

david942j/gdb-ruby #131

0.9.37 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.42 in /gemfiles/lint

deivid-rodriguez/byebug #958

0.9.38 → 0.9.42 Patch PR

Closed 2 months ago 1 comment

build(deps): bump yard from 0.9.38 to 0.9.39

mimaki/mruby #46

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

build(deps): Bump yard from 0.9.38 to 0.9.39

Mattlk13/octobox #881

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.41

TracksApp/tracks #3258

0.9.38 → 0.9.41 Patch PR

Closed 2 months ago 1 comment

Bump the all-dependencies group with 3 updates

CultivateLabs/raif #443

0.9.38 → 0.9.41 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.40

Cyberwatch/faker #47

0.9.38 → 0.9.40 Patch PR

Closed 2 months ago 1 comment

build(deps): bump yard from 0.9.38 to 0.9.40

minimum2scp/dockerfiles #1311

0.9.38 → 0.9.40 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.40

bolshakov/stoplight #653

0.9.38 → 0.9.40 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.40

r6e/ruby-rego #28

0.9.38 → 0.9.40 Patch PR

Closed 2 months ago 1 comment

Bump the bundler-all group across 1 directory with 28 updates

hexlet-components/rails-guestbook #47

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.39

Crown-Commercial-Service/ccs-frontend_helpers #298

0.9.38 → 0.9.39 Patch PR

Open 2 months ago 1 comment

Bump yard from 0.9.38 to 0.9.39

inat-get/is-enum #4

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

Bump the patch-and-minor-dependencies group with 2 updates

simonneutert/labradorite-notebook #260

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 2 comments

chore(deps-dev): bump yard from 0.9.38 to 0.9.39 in /packages/ruby

kreuzberg-dev/liter-llm #21

0.9.38 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

Bump yard from 0.9.37 to 0.9.39

david942j/gdb-ruby #126

0.9.37 → 0.9.39 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the most-gems group with 4 updates

block/elasticgraph #1064

0.9.37 → 0.9.38 Patch PR

Open 4 months ago 3 comments

chore(deps): bump yard from 0.9.26 to 0.9.38

HammerSpb/devsecops-lab #3

0.9.26 → 0.9.38 Patch PR

Closed 4 months ago 2 comments

Bump the bundler group across 1 directory with 5 updates

ASISBusiness/CocoaPods #4

0.9.27 → 0.9.38 Patch PR

Open 4 months ago 2 comments

chore(deps-dev): Bump the patch-updates group across 1 directory with 2 updates

0.9.37 → 0.9.38 Patch PR

Open 4 months ago 2 comments

Bump yard from 0.9.37 to 0.9.38

ONLYOFFICE-QA/onlyoffice_webdriver_wrapper #2465

0.9.37 → 0.9.38 Patch PR

Open 5 months ago 1 comment

Package Details

Name:	`yard`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/yard`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 2

View All gem Advisories

Package Information

Description:

YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions.

Repository:	https://github.com/lsegal/yard
Homepage:	http://yardoc.org
Latest Release:	`0.9.37` almost 2 years ago
Dependent Repos:	56,136
Dependent Packages:	7,681
Downloads:	180,458,828
Ranking:	Top 0.1477% by dependent repos Top 0.1238% by downloads Top 0.0072% by dependent pkgs

PR Status

Open 36 (35.6%)

Merged 4 (4.0%)

Closed 57 (56.4%)

PR Types

Patch 91 (90.1%)