Louis Pilfold

Insufficient verification of Hex package metadata in Gleam

Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion

Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root

Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write

Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification

Multipart form body parser bypasses body size limits in wisp

Path Traversal in wisp.serve_static allows arbitrary file read