{"action":"Upgrade yard to 0.9.11 or later.","affected":[{"fixed":"0.9.11","introduced":"0"}],"component":"yard","cve_ids":["CVE-2017-17042"],"ecosystem":"RubyGems","epss":0.02894,"exploited":false,"fixed_versions":["0.9.11"],"ghsa_id":"GHSA-gj4p-3wh3-2rmf","id":"tcs_01M5KEKBFJE83221J2BGQ4H018","modified_at":"2024-02-16T08:20:04.010887Z","published_at":"2017-12-21T00:47:25Z","references":["https://osv.dev/vulnerability/GHSA-gj4p-3wh3-2rmf","https://nvd.nist.gov/vuln/detail/CVE-2017-17042","https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4","https://github.com/advisories/GHSA-gj4p-3wh3-2rmf","https://github.com/lsegal/yard","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2017-17042.yml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gj4p-3wh3-2rmf","url":"https://osv.dev/vulnerability/GHSA-gj4p-3wh3-2rmf"}],"summary":"Arbitrary file read vulnerability in yard server"}