gleam.run/gleam vulnerabilities

CVEs whose affected-version data names the gleam.run/gleam package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59247High· 7.6

1mo ago

Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata …

Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata …

▾ Twilightgleam-lang · gleam.run/gleamEPSS 0.13%via NVD