Description (CNA)
yard before 0.9.20 allows path traversal.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| yard / yard | affected < 0.9.20 |
CWE
No CWE identifiers supplied.
References
- https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
- https://lists.debian.org/debian-lts-announce/2024/03/msg00006.html
ADP enrichment
No English description supplied.