Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

hex

phoenix

hex

Peace of mind from prototype to production

View on github.com · View on hex.pm

Security Advisories for phoenix in hex

High
about 2 months ago

Phoenix: Unbounded channel joins per transport enables DoS over few connections GSA_kwCzR0hTQS02OTgzLWpmcTgtNDg1d84ABp6p

hex phoenix
Moderate
about 2 months ago

Phoenix: Presence keys colliding with `Object.prototype` members break existence checks GSA_kwCzR0hTQS02M21jLWh3N2ctODZycs4ABp6o

npm, hex phoenix
Medium
4 months ago

Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff EEF-CVE-2026-56812

hex, npm phoenix
High
4 months ago

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service EEF-CVE-2026-56811

hex phoenix
High
6 months ago

Phoenix: Long-poll NDJSON body splitting causes large memory allocation GSA_kwCzR0hTQS02MjhoLXE0OGotanI2cc4ABWgF

hex phoenix
High
6 months ago

Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix EEF-CVE-2026-32689

hex phoenix
High
about 4 years ago

Phoenix before 1.6.14 mishandles check_origin wildcarding GSA_kwCzR0hTQS1wOGY3LTIyZ3EtbTdqOc4AAvXo

hex phoenix
Moderate
over 4 years ago

Phoenix Arbitrary URL Redirect GSA_kwCzR0hTQS1jbWZoLThmOHItZmo5Ns06mw

hex phoenix

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

High 5 Moderate 2 Medium 1