{"meta":{"links":{"Repository":"https://github.com/gleam-wisp/wisp","Sponsor":"https://github.com/sponsors/lpil"},"description":"A practical web framework for Gleam","licenses":["Apache-2.0"],"maintainers":[]},"name":"wisp","url":"https://hex.pm/api/packages/wisp","owners":[{"url":"https://hex.pm/api/users/lpil","email":"louis@lpil.uk","username":"lpil"}],"inserted_at":"2023-07-18T18:17:34.314185Z","updated_at":"2026-03-27T12:33:11.759056Z","repository":"hexpm","releases":[{"version":"2.2.2","url":"https://hex.pm/api/packages/wisp/releases/2.2.2","has_docs":true,"inserted_at":"2026-03-27T12:33:07.554662Z"},{"version":"2.2.1","url":"https://hex.pm/api/packages/wisp/releases/2.2.1","has_docs":true,"inserted_at":"2026-03-08T10:56:50.023197Z"},{"version":"2.2.0","url":"https://hex.pm/api/packages/wisp/releases/2.2.0","has_docs":true,"inserted_at":"2026-01-16T10:39:11.660046Z"},{"version":"2.1.1","url":"https://hex.pm/api/packages/wisp/releases/2.1.1","has_docs":true,"inserted_at":"2025-12-11T18:49:43.367536Z"},{"version":"2.1.0","url":"https://hex.pm/api/packages/wisp/releases/2.1.0","has_docs":true,"inserted_at":"2025-10-01T17:36:49.974605Z"},{"version":"2.0.1","url":"https://hex.pm/api/packages/wisp/releases/2.0.1","has_docs":true,"inserted_at":"2025-09-27T16:21:49.833106Z"},{"version":"2.0.0","url":"https://hex.pm/api/packages/wisp/releases/2.0.0","has_docs":true,"inserted_at":"2025-09-04T12:49:42.608841Z"},{"version":"2.0.0-rc1","url":"https://hex.pm/api/packages/wisp/releases/2.0.0-rc1","has_docs":true,"inserted_at":"2025-07-24T17:50:00.675306Z"},{"version":"1.8.0","url":"https://hex.pm/api/packages/wisp/releases/1.8.0","has_docs":true,"inserted_at":"2025-06-20T11:32:13.310851Z"},{"version":"1.7.0","url":"https://hex.pm/api/packages/wisp/releases/1.7.0","has_docs":true,"inserted_at":"2025-05-13T22:49:23.882276Z"},{"version":"1.6.0","url":"https://hex.pm/api/packages/wisp/releases/1.6.0","has_docs":true,"inserted_at":"2025-03-21T16:25:36.483748Z"},{"version":"1.5.3","url":"https://hex.pm/api/packages/wisp/releases/1.5.3","has_docs":true,"inserted_at":"2025-02-06T11:44:56.317658Z"},{"version":"1.5.2","url":"https://hex.pm/api/packages/wisp/releases/1.5.2","has_docs":true,"inserted_at":"2025-02-03T19:07:03.556774Z"},{"version":"1.5.1","url":"https://hex.pm/api/packages/wisp/releases/1.5.1","has_docs":true,"inserted_at":"2025-01-02T15:12:00.912363Z"},{"version":"1.4.0","url":"https://hex.pm/api/packages/wisp/releases/1.4.0","has_docs":true,"inserted_at":"2024-12-19T11:53:02.766786Z"},{"version":"1.3.0","url":"https://hex.pm/api/packages/wisp/releases/1.3.0","has_docs":true,"inserted_at":"2024-11-27T11:46:50.453323Z"},{"version":"1.2.0","url":"https://hex.pm/api/packages/wisp/releases/1.2.0","has_docs":true,"inserted_at":"2024-10-09T17:06:57.125126Z"},{"version":"1.1.0","url":"https://hex.pm/api/packages/wisp/releases/1.1.0","has_docs":true,"inserted_at":"2024-08-23T16:00:28.735342Z"},{"version":"1.0.0","url":"https://hex.pm/api/packages/wisp/releases/1.0.0","has_docs":true,"inserted_at":"2024-08-21T13:33:55.664129Z"},{"version":"0.16.0","url":"https://hex.pm/api/packages/wisp/releases/0.16.0","has_docs":true,"inserted_at":"2024-07-13T10:54:49.248448Z"},{"version":"0.15.0","url":"https://hex.pm/api/packages/wisp/releases/0.15.0","has_docs":true,"inserted_at":"2024-06-12T12:00:06.832131Z"},{"version":"0.14.0","url":"https://hex.pm/api/packages/wisp/releases/0.14.0","has_docs":true,"inserted_at":"2024-03-28T15:34:10.556871Z"},{"version":"0.13.0","url":"https://hex.pm/api/packages/wisp/releases/0.13.0","has_docs":true,"inserted_at":"2024-03-23T10:36:36.738588Z"},{"version":"0.12.0","url":"https://hex.pm/api/packages/wisp/releases/0.12.0","has_docs":true,"inserted_at":"2024-02-17T17:05:29.140791Z"},{"version":"0.11.0","url":"https://hex.pm/api/packages/wisp/releases/0.11.0","has_docs":true,"inserted_at":"2024-02-06T20:39:00.753429Z"},{"version":"0.10.0","url":"https://hex.pm/api/packages/wisp/releases/0.10.0","has_docs":true,"inserted_at":"2024-01-17T23:07:21.751858Z"},{"version":"0.9.0","url":"https://hex.pm/api/packages/wisp/releases/0.9.0","has_docs":true,"inserted_at":"2024-01-15T12:00:28.308453Z"},{"version":"0.8.0","url":"https://hex.pm/api/packages/wisp/releases/0.8.0","has_docs":true,"inserted_at":"2023-11-13T12:01:15.963760Z"},{"version":"0.7.0","url":"https://hex.pm/api/packages/wisp/releases/0.7.0","has_docs":true,"inserted_at":"2023-11-05T17:56:59.580678Z"},{"version":"0.6.0","url":"https://hex.pm/api/packages/wisp/releases/0.6.0","has_docs":true,"inserted_at":"2023-10-19T11:53:17.282204Z"},{"version":"0.5.0","url":"https://hex.pm/api/packages/wisp/releases/0.5.0","has_docs":true,"inserted_at":"2023-09-13T19:01:54.959897Z"},{"version":"0.4.0","url":"https://hex.pm/api/packages/wisp/releases/0.4.0","has_docs":true,"inserted_at":"2023-08-24T11:45:11.934820Z"},{"version":"0.3.0","url":"https://hex.pm/api/packages/wisp/releases/0.3.0","has_docs":true,"inserted_at":"2023-08-21T08:24:54.024810Z"},{"version":"0.2.0","url":"https://hex.pm/api/packages/wisp/releases/0.2.0","has_docs":true,"inserted_at":"2023-08-12T08:06:16.826923Z"},{"version":"0.1.0","url":"https://hex.pm/api/packages/wisp/releases/0.1.0","has_docs":true,"inserted_at":"2023-07-18T18:17:34.321005Z"}],"html_url":"https://hex.pm/packages/wisp","latest_version":"2.2.2","downloads":{"all":356729,"day":1783,"recent":79478,"week":9113},"security_advisories":[{"id":"GHSA-8645-p2v4-73r2","aliases":["CVE-2026-32145","EEF-CVE-2026-32145"],"references":[{"type":"WEB","url":"https://github.com/gleam-wisp/wisp/security/advisories/GHSA-8645-p2v4-73r2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32145"},{"type":"WEB","url":"https://github.com/gleam-wisp/wisp/commit/7a978748e12ab29db232c222254465890e1a4a90"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-32145.html"},{"type":"PACKAGE","url":"https://github.com/gleam-wisp/wisp"},{"type":"WEB","url":"https://osv.dev/vulnerability/EEF-CVE-2026-32145"}],"summary":"wisp has Allocation of Resources Without Limits or Throttling","api_url":"https://api.osv.dev/v1/vulns/GHSA-8645-p2v4-73r2","published_at":"2026-04-03T03:40:30Z","html_url":"https://osv.dev/vulnerability/GHSA-8645-p2v4-73r2","cvss_score":8.7,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","modified_at":"2026-04-06T23:32:52Z","withdrawn_at":null,"affected":["< 2.2.2"]},{"id":"EEF-CVE-2026-32145","aliases":["CVE-2026-32145","GHSA-8645-p2v4-73r2"],"references":[{"type":"FIX","url":"https://github.com/gleam-wisp/wisp/commit/7a978748e12ab29db232c222254465890e1a4a90"},{"type":"ADVISORY","url":"https://github.com/gleam-wisp/wisp/security/advisories/GHSA-8645-p2v4-73r2"},{"type":"PACKAGE","url":"https://hex.pm/packages/wisp"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-32145.html"}],"summary":"Multipart form body parser bypasses body size limits in wisp","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-32145","published_at":"2026-04-02T10:30:47Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-32145","cvss_score":8.7,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:30:11Z","withdrawn_at":null,"affected":[">= 0.2.0 and < 2.2.2"]},{"id":"GHSA-h7cj-j2vv-qw8r","aliases":["CVE-2026-28807","EEF-CVE-2026-28807"],"references":[{"type":"WEB","url":"https://osv.dev/vulnerability/EEF-CVE-2026-28807"},{"type":"PACKAGE","url":"https://github.com/gleam-wisp/wisp"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-28807.html"},{"type":"WEB","url":"https://github.com/gleam-wisp/wisp/commit/161118c431047f7ef1ff7cabfcc38981877fdd93"},{"type":"WEB","url":"https://github.com/gleam-wisp/wisp/commit/129dcb1fe10ab1e676145d91477535e1c90ab550"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28807"},{"type":"WEB","url":"https://github.com/gleam-wisp/wisp/security/advisories/GHSA-h7cj-j2vv-qw8r"}],"summary":"Wisp Vulnerable to Path Traversal","api_url":"https://api.osv.dev/v1/vulns/GHSA-h7cj-j2vv-qw8r","published_at":"2026-03-11T00:11:39Z","html_url":"https://osv.dev/vulnerability/GHSA-h7cj-j2vv-qw8r","cvss_score":8.7,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-06-08T23:45:16Z","withdrawn_at":null,"affected":[">= 2.1.1 and < 2.2.1"]},{"id":"EEF-CVE-2026-28807","aliases":["CVE-2026-28807","GHSA-h7cj-j2vv-qw8r"],"references":[{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-28807.html"},{"type":"ADVISORY","url":"https://github.com/gleam-wisp/wisp/security/advisories/GHSA-h7cj-j2vv-qw8r"},{"type":"PACKAGE","url":"https://hex.pm/packages/wisp"},{"type":"FIX","url":"https://github.com/gleam-wisp/wisp/commit/161118c431047f7ef1ff7cabfcc38981877fdd93"}],"summary":"Path Traversal in wisp.serve_static allows arbitrary file read","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-28807","published_at":"2026-03-10T21:34:47Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-28807","cvss_score":8.7,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-07-30T18:22:04Z","withdrawn_at":null,"affected":[">= 2.1.1 and < 2.2.1"]}],"docs_html_url":"https://wisp.hexdocs.pm/","retirements":{"2.1.1":{"message":"Path traversal with serve_static","reason":"security"},"2.2.0":{"message":"Path traversal with serve_static","reason":"security"}},"configs":{"erlang.mk":"dep_wisp = hex 2.2.2","mix.exs":"{:wisp, \"~> 2.2\"}","rebar.config":"{wisp, \"2.2.2\"}"},"latest_stable_version":"2.2.2"}