Advisories · Technology
Gleam.
Every CVE that names Gleam among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Path traversal in Gleam via unvalidated package application names
- Gleam
- Path traversal
- CVSS 7.6 High
Insufficient verification of Hex package metadata in Gleam
- gleam
- CWE-345
- CVSS 5.1 Medium
Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root
- Gleam
- Path traversal
- CVSS 4.6 Medium
Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write
- Gleam
- Path traversal
- CVSS 5.6 Medium
Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion
- Gleam
- Path traversal
- CVSS 8.3 High
Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification
- Gleam
- Path traversal