{"api_version":"v1","generated_at":"2026-10-09T09:00:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-gleam-gleam-efa684575172","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/gleam","name":"Gleam","next_cursor":null,"observations":[{"affected":"Gleam: 0.10.0-rc1 < 1.17.0, c82a2d83bd0c06cafdc196820deb3f89a9b3ff7c < 6435a5528b9ae0449e2f32be579641ec485f6866, v0.10.0-rc1-elixir < v1.17.0-elixir, v0.10.0-rc1-erlang < v1.17.0-erlang, v0.10.0-rc1-node < v1.17.0-node, v0.10.0-rc1-node-slim < v1.17.0-node-slim, v0.10.0-rc1-elixir-slim < v1.17.0-elixir-slim, v0.10.0-rc1-erlang-slim < v1.17.0-erlang-slim, v0.10.0-rc1-erlang-alpine < v1.17.0-erlang-alpine, v0.10.0-rc1-elixir-alpine < v1.17.0-elixir-alpine, v0.10.0-rc1-node-alpine < v1.17.0-node-alpine, v0.10.0-rc1-scratch < v1.17.0-scratch","affected_versions_present":true,"cve_id":"CVE-2026-42795","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42795","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T01:05:20.790Z","patch_url":"","primary_source":"","published":"2026-06-02T13:41:39.527Z"},{"affected":"Gleam: 1.16.0 < 1.17.0, 61ed8deb6572b5591ad17d6302c1a38607522f16 < 81570611906b6b0039c948037094d09a68700f3a, v1.16.0-elixir < v1.17.0-elixir, v1.16.0-erlang < v1.17.0-erlang, v1.16.0-node < v1.17.0-node, v1.16.0-node-slim < v1.17.0-node-slim, v1.16.0-elixir-slim < v1.17.0-elixir-slim, v1.16.0-erlang-slim < v1.17.0-erlang-slim, v1.16.0-erlang-alpine < v1.17.0-erlang-alpine, v1.16.0-elixir-alpine < v1.17.0-elixir-alpine, v1.16.0-node-alpine < v1.17.0-node-alpine, v1.16.0-scratch < v1.17.0-scratch","affected_versions_present":true,"cve_id":"CVE-2026-32685","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32685","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T01:05:06.166Z","patch_url":"","primary_source":"","published":"2026-06-02T13:41:37.885Z"},{"affected":"Gleam: 0.18.0-rc1 < 1.17.0, ed7aec0484f10d60978b63788c8a6497590855ab < 690ca069817bee5f77a28fc3e360627c1da19291, v0.18.0-rc1-elixir < v1.17.0-elixir, v0.18.0-rc1-erlang < v1.17.0-erlang, v0.18.0-rc1-node < v1.17.0-node, v0.18.0-rc1-node-slim < v1.17.0-node-slim, v0.18.0-rc1-elixir-slim < v1.17.0-elixir-slim, v0.18.0-rc1-erlang-slim < v1.17.0-erlang-slim, v0.18.0-rc1-erlang-alpine < v1.17.0-erlang-alpine, v0.18.0-rc1-elixir-alpine < v1.17.0-elixir-alpine, v0.18.0-rc1-node-alpine < v1.17.0-node-alpine, v0.18.0-rc1-scratch < v1.17.0-scratch","affected_versions_present":true,"cve_id":"CVE-2026-43965","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-43965","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-08T01:05:35.928Z","patch_url":"","primary_source":"","published":"2026-06-02T13:41:37.421Z"},{"affected":"Gleam: 1.9.0-rc1 < *, a4fde22445ab8e5cc79c2ff48971616cb570702c < *, v1.9.0-rc1-elixir < v1.15.4-elixir, v1.9.0-rc1-erlang < v1.15.4-erlang, v1.9.0-rc1-node < v1.15.4-node, v1.9.0-rc1-node-slim < v1.15.4-node-slim, v1.9.0-rc1-elixir-slim < v1.15.4-elixir-slim, v1.9.0-rc1-erlang-slim < v1.15.4-erlang-slim, v1.9.0-rc1-erlang-alpine < v1.15.4-erlang-alpine, v1.9.0-rc1-elixir-alpine < v1.15.4-elixir-alpine, v1.9.0-rc1-node-alpine < v1.15.4-node-alpine, v1.9.0-rc1-scratch < v1.15.4-scratch","affected_versions_present":true,"cve_id":"CVE-2026-32146","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32146","fixed":"Upgrade to Gleam 1.15.4 or later.; Both patches must be applied: the original incomplete fix (1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf, backported as 55bb36e6d7febfbbc48c4d001e0ae13eb0312d78 to 1.15) and the follow-up fix (2dc0467f822c75de94697a912755d172928ee40a, backported as 92aae3913570e8d8962f6399404777d313045bfa to 1.15). Gleam 1.15.4 includes both.","last_modified":"2026-09-08T00:58:49.792Z","patch_url":"https://github.com/gleam-lang/gleam/commit/1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf","primary_source":"","published":"2026-04-11T12:59:22.911Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Gleam"}}