These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-32145 is a high-severity, unauthenticated denial-of-service issue in wisp's multipart form handling. In affected releases, multipart parsing can bypass configured size limits, allowing a single oversized multipart request to consume server memory or disk.
CVE-2026-28807 is a Path Traversal vulnerability in the wisp module of Gleam Wisp. The vulnerability arises from the wisp.serve_static function, which is susceptible to path traversal attacks because it performs sanitization before percent-decoding. This allows an attacker to manipulate the path by using percent-encoded sequences like %2e%2e, which can be converted to .. after decoding, enabling directory [truncated]