Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: phoenixframework Component: Phoenix Clear all filters
TI-2026-40965 CVE-2026-56812 · GHSA-63mc-hw7g-86rr

Improper check for unusual conditions in phoenixframework phoenix

Priority MEDIUM 61

Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause a persistent client-side denial of serv…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00796 Published 2026-07-07 Fixed in 1.5.15, 1.6.17 +2 CWE-754
TI-2026-40964 CVE-2026-56811 · GHSA-6983-jfq8-485w

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

Priority MEDIUM 45

Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Ph…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00775 Published 2026-07-07 Fixed in 1.5.15, 1.6.17 +2 CWE-770
TI-2017-14495 CVE-2017-1000163 · GHSA-cmfh-8f8r-fj96

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and…

Priority LOW 32

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02377 Published 2017-11-17 Fixed in 1.0.6, 1.1.8 +1 CWE-601