Phoenixframework - vulnerabilities (CVEs)
8 CVEs in 3 products, 0 in the last 30 days, newest from 2026-08-10.
Products
- Phoenix - 5 CVEs
- Phoenix Live View - 2 CVEs
- Phoenix Html - 1 CVEs
Newest CVEs of Phoenixframework
- CVE-2026-64941 - CVSS 2.1 (low), 2026-08-10: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an…
- CVE-2026-58228 - CVSS 5.1 (medium), 2026-07-13: Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a…
- CVE-2026-56812 - CVSS 7.5 (high), 2026-07-07: Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary…
- CVE-2026-56811 - CVSS 8.7 (high), 2026-07-07: Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to…
- CVE-2026-32689 - CVSS 8.7 (high), 2026-05-05: Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON…
- CVE-2021-46871 - CVSS 6.1 (medium), 2023-01-10: tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.
- CVE-2022-42975 - CVSS 7.5 (high), 2022-10-17: socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the…
- CVE-2017-1000163 - CVSS 6.1 (medium), 2017-11-17: The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may…
