Lpil
Lpil Gleam: vulnerabilidades y CVE
Lpil Gleam tiene 6 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses6
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-76233 | Alta (8.4) | 1.0% | — | 19 ago 2026 | Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam deps update commands without proper sanitization. Attackers… |
| CVE-2026-59247 | Alta (7.6) | 0.18% | — | 29 jul 2026 | Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches… |
| CVE-2026-43965 | Media (5.6) | 0.19% | — | 2 jun 2026 | Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by… |
| CVE-2026-42795 | Media (5.1) | 0.17% | — | 2 jun 2026 | Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers (gleam_files, native_files, private_files)… |
| CVE-2026-32685 | Media (4.6) | 0.19% | — | 2 jun 2026 | Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from… |
| CVE-2026-32146 | Alta (8.3) | 0.22% | — | 11 abr 2026 | Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download. Dependency names from gleam.toml and manifest.toml are… |