wisp vulnerabilities

2 known vulnerabilities in wisp from Gleam-wisp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  wisp: Allocation of Resources Without Limits or Throttling

  CVE-2026-32145Apr 2, 2026Gleam-wisp

  Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing. The multipart_body function bypasses configured max_body_size and max_files_size limits. When a multipart boundary

• 7.5 High severity

  wisp: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-28807Mar 10, 2026Gleam-wispEPSS 1.17%

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.serve_static function is vulnerable to path traversal because sanitization r