CVE-2026-49342

{
  "id": "CVE-2026-49342",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-19T20:16:18.377",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as `/../yard-cache-secret.html` is joined against that root and can return a readable sibling `.html` file outside the intended static tree. Version 0.9.44 patches the issue."
    },
    {
      "lang": "es",
      "value": "YARD es una herramienta de generación de documentación para el lenguaje de programación Ruby. Antes de la versión 0.9.44, la búsqueda de caché estática de YARD lee una ruta de solicitud antes de que se ejecute la limpieza de rutas del router. Cuando un servidor está configurado con una raíz de documento, una ruta de recorrido como /.. / yard-cache-secret.html se une a esa raíz y puede devolver un archivo .html hermano legible fuera del árbol estático previsto. La versión 0.9.44 corrige el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "lsegal",
          "product": "yard",
          "versions": [
            {
              "version": "< 0.9.44",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-22T17:13:12.964584Z",
          "id": "CVE-2026-49342",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/lsegal/yard/commit/f78c19f0dd33a407085b4ed181bb60c0aa0078b4",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}