Skip to content
OpenAdvisories

Vendor

Gleam

6 known vulnerabilities.

Products

Gleam 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-59247

    Insufficient verification of Hex package metadata in Gleam

    Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata from the signature-veri…

    Gleam Gleam
  • High 8.3
    CVE-2026-32146

    Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification

    Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download. Dependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without…

    Gleam Gleam