Read the docs

phoenixframework

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

phoenixframework records in CISA KEV

No phoenixframework vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phoenix 4 records MEDIUM Phoenix Html 1 record LOW

Records

4 records in Phoenix · all components

TI-2026-40965 CVE-2026-56812 · GHSA-63mc-hw7g-86rr

Improper check for unusual conditions in phoenixframework phoenix

Priority MEDIUM 61

Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause a persistent client-side denial of serv…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00796 Published 2026-07-07 Fixed in 1.5.15, 1.6.17 +2 CWE-754
TI-2026-40964 CVE-2026-56811 · GHSA-6983-jfq8-485w

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

Priority MEDIUM 45

Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Ph…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00775 Published 2026-07-07 Fixed in 1.5.15, 1.6.17 +2 CWE-770
TI-2017-14495 CVE-2017-1000163 · GHSA-cmfh-8f8r-fj96

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and…

Priority LOW 32

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02377 Published 2017-11-17 Fixed in 1.0.6, 1.1.8 +1 CWE-601
Open these records in search →