Skip to content

Product

hex wisp vulnerabilities

2 published CVES affecting hex wisp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest hex wisp CVEs

Newest publication first

  1. CVE-2026-32145 Multipart form body parser bypasses body size limits in wisp

    Published
    HighCVSS 8.7 EPSS 0.63%

    Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing. The multipart_body function bypasses configured max_body_size and max_files_size limits. When a multipart boundary is not present in a...

  2. CVE-2026-28807 Path Traversal in wisp.serve_static allows arbitrary file read

    Published
    HighCVSS 8.7 EPSS 1.2%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.serve_static function is vulnerable to path traversal because sanitization runs before percent-d...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.