CyberSecBulletin

Phenixdigital vulnerabilities

We track 2 vulnerabilities in Phenixdigital products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2026.

2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score

Latest Phenixdigital vulnerabilities

  • 8.2 High severity

    phoenix_storybook: Allocation of Resources Without Limits or Throttling

    CVE-2026-8469Phenixdigital

    Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to ato

  • 9.5 Critical severity

    phoenix_storybook: Improper Control of Generation of Code

    CVE-2026-8467PhenixdigitalEPSS 2.11%

    Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.Pla