gleam-lang

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gleam-lang records in CISA KEV

No gleam-lang vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-42387 CVE-2026-59247

Insufficient verification of Hex package metadata in Gleam

LOW 34

Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00182 Published 2026-07-29 Fixed in 1.18.0, v1.18.0-elixir +9 CWE-345

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0