https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:50:04.264221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-38238 cnvd-2017-38238 2026-10-03T23:50:04.383125+00:00 cnvd-2017-38238 https://cve.radiocsirt.org/vuln/euvd-2026-165651 EUVD-2026-165651 2026-10-03T23:50:04.383174+00:00 EUVD-2026-165651 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17042 fkie_cve-2017-17042 2026-10-03T23:50:04.383197+00:00

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-gj4p-3wh3-2rmf GHSA-gj4p-3wh3-2rmf — Arbitrary file read vulnerability in yard server 2026-10-03T23:50:04.383269+00:00

Affected: RubyGems: yard

`lib/yard/core_ext/file.rb` in the server in YARD before 0.9.11 does not block relative paths with an initial `../` sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

 https://cve.radiocsirt.org/vuln/gsd-2017-17042 gsd-2017-17042 2026-10-03T23:50:04.383297+00:00 gsd-2017-17042 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11532-1 openSUSE-SU-2024:11532-1 — yast2-buildtools-4.4.1-1.2 on GA media 2026-10-03T23:50:04.383310+00:00

yast2-buildtools-4.4.1-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1890-1 SUSE-SU-2018:1890-1 — Security update for rubygem-yard 2026-10-03T23:50:04.383331+00:00

Security update for rubygem-yard

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17042 UBUNTU-CVE-2017-17042 2026-10-03T23:50:04.383347+00:00

Affected: Ubuntu:Pro:16.04:LTS: yard

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.