CyberSecBulletin

Gleam-wisp vulnerabilities

We track 2 vulnerabilities in Gleam-wisp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Gleam-wisp vulnerabilities

  • 7.5 High severity

    wisp: Allocation of Resources Without Limits or Throttling

    CVE-2026-32145Gleam-wisp

    Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing. The multipart_body function bypasses configured max_body_size and max_files_size limits. When a multipart boundary

  • 7.5 High severity

    wisp: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-28807Gleam-wispEPSS 1.17%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.serve_static function is vulnerable to path traversal because sanitization r