Skip to content
OpenAdvisories

Package · Hex

phoenix_live_view

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-58228

    Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

    Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_…

    phoenixframework phoenix_live_view phoenix_live_view Hex