Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: gleam-wisp Clear all filters
TI-2026-24682 CVE-2026-32145 · GHSA-8645-p2v4-73r2

Multipart form body parser bypasses body size limits in wisp

Priority MEDIUM 45

Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00633 Published 2026-04-02 Fixed in 2.2.2 CWE-770
TI-2026-23001 CVE-2026-28807 · GHSA-h7cj-j2vv-qw8r

Path Traversal in wisp.serve_static allows arbitrary file read

Priority MEDIUM 46

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01165 Published 2026-03-10 Fixed in 2.2.1 CWE-22