Skip to content
OpenAdvisories

Package · Hex

phoenix

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-56811

    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

    Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Phoenix socket with a reachable channel t…

    phoenixframework phoenix phoenix Hex
  • High 8.7
    CVE-2026-32689

    Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix

    Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Transports.LongPoll':publish/4, when a POST request is received wi…

    phoenixframework phoenix phoenix Hex
  • High 7.5
    CVE-2022-42975

    Phoenix before 1.6.14 mishandles check_origin wildcarding

    socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.

    phoenix Hex