Gleam vulnerabilities
We track 2 vulnerabilities in Gleam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Gleam vulnerabilities
- 7.6 High severity
Gleam: Insufficient Verification of Data Authenticity
Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata from the signature-verif
- 7.8 High severity
Gleam: Improper Limitation of a Pathname to a Restricted Directory
Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download. Dependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without