CVE-2024-27285

Medium

Advisory

Published 28 Feb 2024In the index since 8 Sept 2026

YARD's default template vulnerable to Cross-site Scripting in generated frames.html

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 1 image.

Affected package	Affected versions	Fixed in	Images
yardgem	0.9.28	0.9.36	1

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2024-27285.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	yard@0.9.28	0.9.36

12,791

1 of the 4 container images this version deploys carry CVE-2024-27285.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	yard@0.9.28	0.9.36

12,791

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	yard@0.9.28	0.9.36	2