Skip to content
OpenAdvisories

Package · Hex

phoenix_live_view

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.1
    CVE-2026-64941

    Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR. redirect/2 validates …

    phoenixframework phoenix_live_view phoenix_live_view Hex
  • Medium 5.1
    CVE-2026-58228

    Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

    Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_…

    phoenixframework phoenix_live_view phoenix_live_view Hex