CVE-2026-42795 — Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball.

Loading…

CVE-2026-42795 — Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. — CVE Database · The Intelligence Room