Path Traversal in Gleam

CVE-2026-43965

Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::read_from_disc are…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.000 (2.7th percentile) — read the EPSS interpretation.