Vendor

    Phoenixframework

    9 known vulnerabilities in products by Phoenixframework, 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Phoenixframework
    HighCVE-2026-56811

    Phoenix: Unbounded channel joins per transport enables DoS over few connections

    		7.5
    MediumCVE-2017-1000163

    Phoenix Framework Phoenix: security vulnerability

    		6.1
    HighCVE-2026-56812

    Phoenix: Presence keys colliding with `Object.prototype` members break existence checks

    		7.5
    HighCVE-2026-32689

    Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix

    		—
    MediumCVE-2026-117645

    Phoenixframework Phoenix Html: Cross-site Scripting

    		—
    MediumCVE-2026-58228

    Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

    		—
    HighCVE-2022-42975

    Phoenix Framework Phoenix: Cross-Site Request Forgery (CSRF)

    		7.5
    LowCVE-2026-64941

    Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR

    		—
    MediumCVE-2021-46871

    Phoenixframework Phoenix Html: Cross-Site Scripting (XSS)

    		6.1

    Products

    Products by Phoenixframework
    Phoenix Framework Phoenix50