107 matches found
EEF-CVE-2026-28807 Path Traversal in wisp.serve_static allows arbitrary file read
Summary Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.serve\static function is vulnerable to path traversal because sanitization runs before percent-decoding. Th...
CVE-2026-28807 Path Traversal in wisp.serve_static allows arbitrary file read
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.servestatic function is vulnerable to path traversal because sanitization runs before percent-decoding. The encoded...
CVE-2026-28807 Path Traversal in wisp.serve_static allows arbitrary file read
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal. The wisp.servestatic function is vulnerable to path traversal because sanitization runs before percent-decoding. The encoded...
PT-2026-24472
Name of the Vulnerable Software and Affected Versions gleam-wisp wisp versions 2.1.1 through 2.2.0 Description A path traversal issue exists in gleam-wisp wisp that allows arbitrary file reading through percent-encoded path traversal. The wisp.serve static function is susceptible because...
Wisp 安全漏洞
Wisp is a practical Gleam web framework developed under open source, designed for rapid development and easy maintenance. Versions of Wisp from 2.1.1 to 2.2.1 contained security vulnerabilities. These vulnerabilities were caused by a path traversal vulnerability in the wisp.servestatic function,...
CVE-2026-28807
creationtimestamp| type| source ---|---|--- 2026-03-09 12:29:02+00:00| published-proof-of-concept| https://github.com/gleam-wisp/wisp/security/advisories/GHSA-h7cj-j2vv-qw8r...
PT-2026-6643
Name of the Vulnerable Software and Affected Versions Edimax BR-6288ACL versions up to 1.12 Description A security issue exists in Edimax BR-6288ACL versions up to 1.12. The wiz WISP24gmanual function within the wiz WISP24gmanual.asp file is susceptible to cross site scripting due to manipulation...
MAL-2025-43705 Malicious code in cascade-wisp-evc586-project (npm)
The package cascade-wisp-evc586-project was found to contain malicious code...
Malicious code in cascade-wisp-evc586-project (npm)
The package cascade-wisp-evc586-project was found to contain malicious code...
Malicious code in mangrove-wisp-xpi276-project (npm)
The package mangrove-wisp-xpi276-project was found to contain malicious code...
Malicious code in lilypad-wisp-khn198-project (npm)
The package lilypad-wisp-khn198-project was found to contain malicious code...
Malicious code in wisp-giraffe-rcj353-project (npm)
The package wisp-giraffe-rcj353-project was found to contain malicious code...
Malicious code in wisp-lagoon-ejj064-project (npm)
The package wisp-lagoon-ejj064-project was found to contain malicious code...
Malicious code in everglow-wisp-lve550-project (npm)
The package everglow-wisp-lve550-project was found to contain malicious code...
Malicious code in wisp-zrpzi-r7ina-xenith-project (npm)
The package wisp-zrpzi-r7ina-xenith-project was found to contain malicious code...
Malicious code in wisp-xanadu-elm834-project (npm)
The package wisp-xanadu-elm834-project was found to contain malicious code...
Malicious code in wisp-thunder-ufm916-project (npm)
The package wisp-thunder-ufm916-project was found to contain malicious code...
Malicious code in honey-wisp-pws898-project (npm)
The package honey-wisp-pws898-project was found to contain malicious code...