What’s Vulnerable › Products

Gleam vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Gleam version is affected

Latest Gleam vulnerabilities

• CVE-2026-103061 — Path traversal in Gleam via unvalidated package application names (CVSS 5.9)
• CVE-2026-43965 — Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion (CVSS 5.6)
• CVE-2026-42795 — Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root (CVSS 5.1)
• CVE-2026-32685 — Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write (CVSS 4.6)
• CVE-2026-32146 — Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification (CVSS 7.8)