Threats affecting pkg:hex/gleam

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.6	EPSS 0.2%	CVE-2026-59247SUSE gleam · Security update for gleam High7.6EPSS 0.2%2026-08-10GCVE DatabaseCVE-2026-59247 A security update for Gleam version 1.18.1 addresses a vulnerability (CVE-2026-59247) involving insufficient verification of data authenticity. This flaw could allow a man-in-the-middle (MITM) attacker to substitute forged Hex package contents during dependency resolution. The update also sets the minimum required Erlang version to 26 and includes various bug fixes and performance improvements. EPSS 0.2%Report on CVE-2026-59247 Vulnerability SUSE Product Security Team	GCVE Database	2026-08-10

Page 1 of 1