Read the docs

gleam-wisp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

gleam-wisp records in CISA KEV

No gleam-wisp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wisp 2 records MEDIUM

Records

2 records

TI-2026-23001 CVE-2026-28807 · GHSA-h7cj-j2vv-qw8r

Path Traversal in wisp.serve_static allows arbitrary file read

Priority MEDIUM 46

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01165 Published 2026-03-10 Fixed in 2.2.1 CWE-22
TI-2026-24682 CVE-2026-32145 · GHSA-8645-p2v4-73r2

Multipart form body parser bypasses body size limits in wisp

Priority MEDIUM 45

Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00633 Published 2026-04-02 Fixed in 2.2.2 CWE-770
Open these records in search →