Exposure of Phoenix Framework

Web frameworks

12

exposure score

1,125

sites use

0

exploited

0

critical

CVEs

4 results

CVE-2026-56812MEDIUMPhoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiffEPSS 0.5%CVE-2026-32689HIGHLong-poll NDJSON body splitting causes unbounded memory allocation in PhoenixEPSS 0.5%CVE-2026-56811HIGHPhoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of serviceEPSS 0.4%CVE-2026-58228MEDIUMScheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>EPSS 0.4%