← All advisories

High severity7.5NVD Advisory· Published Jul 29, 2019· Updated Jun 17, 2026

CVE-2019-1020001

CVE-2019-1020001

Description

yard before 0.9.20 allows path traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
yardRubyGems	< 0.9.20	0.9.20

Affected products

3

Yardoc/Yard2 versions
cpe:2.3:a:yardoc:yard:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yardoc:yard:*:*:*:*:*:*:*:*range: <0.9.20
- (no CPE)range: < 0.9.20
ghsa-coords
pkg:gem/yard
Range: < 0.9.20

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-xfhh-rx56-rxcrghsaADVISORY
github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcrnvdMitigationThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-1020001ghsaADVISORY
lists.debian.org/debian-lts-announce/2024/03/msg00006.htmlnvdWEB

News mentions

0

No linked articles in our index yet.