Gleam

5 CVEs across 1 Gleam products. Browse Gleam vulnerabilities, severities, and proof-of-concept exploits.

Gleam products with known CVEs

ProductCVEs
Gleam5
Gleam CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1030612026-10-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-lang gleam allows a malicious package publisher to delete…
CVE-2026-439652026-06-02Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package…
CVE-2026-427952026-06-02Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file…
CVE-2026-326852026-06-02Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation out…
CVE-2026-32146High7.82026-04-11Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency downloa…