Skip to content
OpenAdvisories

Package · Hex

phoenix_storybook

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 2.3
    CVE-2026-47068

    Cross-session PubSub topic injection via URL parameter in phoenix_storybook

    Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter. 'Elixir.PhoenixStorybook.Story.ComponentIframeLive':handle_params/3 in lib/phoenix_storybo…

    phenixdigital phoenix_storybook phoenix_storybook Hex
  • Critical 9.5
    CVE-2026-8467 Public exploit

    Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

    Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.Pl…

    phenixdigital phoenix_storybook phoenix_storybook Hex
  • High 8.2
    CVE-2026-8469

    Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook

    Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to at…

    phenixdigital phoenix_storybook phoenix_storybook Hex