Skip to content
OpenAdvisories

Vendor

phoenixframework

6 known vulnerabilities.

Products

phoenix 3 phoenix_live_view 2 phoenix_html 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-56811

    Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

    Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Phoenix socket with a reachable channel t…

    phoenixframework phoenix phoenix Hex
  • High 8.7
    CVE-2026-32689

    Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix

    Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Transports.LongPoll':publish/4, when a POST request is received wi…

    phoenixframework phoenix phoenix Hex