Denial of Service Vulnerability in Gleam-Wisp Product by Vendor Gleam

CVE-2026-32145

What is CVE-2026-32145?

The Gleam-Wisp product is affected by a vulnerability that allows unauthenticated attackers to exploit multipart form body parsing. The multipart_body function fails to enforce limits set for max_body_size and max_files_size, allowing submission of excessive data in a single HTTP request. This flaw can lead to exhaustion of server memory or disk space, rendering the service unavailable due to the inability to process additional requests. This issue is present in versions of wisp from 0.2.0 up to, but not including, 2.2.2. Immediate action should be taken to mitigate potential disruptions.

References