Priority LOW 27
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a dev…
Vulnerabilities
4 records
TI-2026-31015 CVE-2026-42795
Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root
Priority MEDIUM 56
Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball.
TI-2026-25177 CVE-2026-32685
Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write
Priority MEDIUM 54
Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory.
TI-2026-32010 CVE-2026-43965
Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion
Priority MEDIUM 58
Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content.