CVE-2026-103061 | gleam-lang Gleam up to 1.19.1 Dependency Resolution dependencies.rs hex_manifest_package app path traversal

October 12, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in gleam-lang Gleam up to 1.19.1. This impacts the function hex_manifest_package of the file compiler-cli/src/dependencies.rs of the component Dependency Resolution. The manipulation of the argument app leads to path traversal.

This vulnerability is listed as CVE-2026-103061. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More