Gleam vulnerabilities
6 published CVEs name Gleam among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103061
Path traversal in Gleam via unvalidated package application names
Gleam · Gleam
Medium5.9 - CVE-2026-59247
Insufficient verification of Hex package metadata in Gleam
Gleam · Gleam
High7.6 - CVE-2026-42795
Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root
Gleam · Gleam
Medium5.1 - CVE-2026-32685
Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write
Gleam · Gleam
Medium4.6 - CVE-2026-43965
Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion
Gleam · Gleam
Medium5.6 - CVE-2026-32146
Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification
Gleam · Gleam
High8.3