Skip to content
OpenAdvisories

Package · Hex

wisp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-32145

    Multipart form body parser bypasses body size limits in wisp

    Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing. The multipart_body function bypasses configured max_body_size and max_files_size limits. When a multipart boundar…

    gleam-wisp wisp wisp Hex
  • High 8.7
    CVE-2026-28807

    Path Traversal in wisp.serve_static allows arbitrary file read

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.serve_static function is vulnerable to path traversal because sanitization …

    gleam-wisp wisp wisp Hex