Gleam

Products

Exploited and recent CVEs

• CVE-2026-103061 Medium 5.9 Path traversal in Gleam via unvalidated package application names 0.4%
• CVE-2026-42795 Medium 5.1 Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root 0.2%
• CVE-2026-32685 Medium 4.6 Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write 0.2%
• CVE-2026-43965 Medium 5.6 Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion 0.2%
• CVE-2026-32146 High 8.6 Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification 0.2%