PT-2026-128759

TuxCare rebuilt @angular/compiler-cli to address 2 CVEs. Fixed in 13.4.0-tuxcare.9...

PT-2026-128884

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 12.2.17-tuxcare.3...

PT-2026-128799

TuxCare rebuilt @angular/compiler-cli to address 3 CVEs. Fixed in 14.2.12-tuxcare.5...

PT-2026-128964

TuxCare rebuilt @angular/compiler-cli to address 2 CVEs. Fixed in 17.3.12-tuxcare.3...

PT-2026-128928

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 15.2.10-tuxcare.5...

PT-2026-128718

TuxCare rebuilt @angular/compiler-cli to address 14 CVEs. Fixed in 12.2.16-tuxcare.3...

PT-2026-128688

TuxCare rebuilt @angular/compiler-cli to address 1 CVE. Fixed in 6.0.1-tuxcare.1...

PT-2026-128959

TuxCare rebuilt @angular/compiler-cli to address 13 CVEs. Fixed in 11.2.0-tuxcare.3...

PT-2026-128767

TuxCare rebuilt @angular/compiler-cli to address 3 CVEs. Fixed in 16.2.7-tuxcare.3...

SUSE CVE-2026-103061

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061

The gleam-lang gleam compiler is vulnerable to a Path Traversal (CWE-22) issue in versions 0.32.4 through 1.19.2 . The root cause is the lack of validation on the app field within Hex package metadata, which the compiler uses to determine build directory names. A malicious publisher can provide a...

CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

EUVD-2026-97758

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an app field...

EEF-CVE-2026-103061 Path traversal in Gleam via unvalidated package application names

Summary Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside the project's build directory when a developer builds a project. A Hex package release's metadata carries an ap...

PT-2026-110870

Name of the Vulnerable Software and Affected Versions gleam versions 0.32.4 through 1.19.1 Description A path traversal issue exists where a malicious package publisher can cause the deletion of directories outside the project build directory. This occurs because Gleam reads the app field from th...

@beenotung/tslib (>=1.0.0, <=3.4.1), @blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1) +199 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=4.0.0, <=4.4.6)

@angular/compiler-cli NPM version =4.0.0, =1.0.0, =1.10.0, =1.10.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =0.0.1, =0.1.0, =2.4.6-scm.5, =2.4.9 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@bb-cli/schematics (3.0.0-pr.0), @eui/deps-base (>=7.15.0-snapshot-1585667137763.0, <=9.0.1-85) +19 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=9.0.6, <=9.1.12)

@angular/compiler-cli NPM version =9.0.6, =7.15.0-snapshot-1585667137763.0, =0.1.20, =0.1.8, =9.112.0-dev.0, =0.0.3, =5.0.11, =0.0.4, =0.0.13, =2.0.83, =2.0.83, =0.0.10, =3.0.10, =1.0.16, =1.0.21 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...