Vulnerability in Gleam-lang Gleam

CVE-2026-59247

Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata fr…

Affected products

  • Gleam-lang Gleam — versions 0.18.0, 8447b78cc844ff4aec44eea23dbd68d1fea11f11, v0.18.0-elixir

Weakness classification (CWE)

References