phoenix_storybook vulnerabilities

2 known vulnerabilities in phoenix_storybook from Phenixdigital. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  phoenix_storybook: Allocation of Resources Without Limits or Throttling

  CVE-2026-8469May 20, 2026Phenixdigital

  Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to ato

• 9.5 Critical severity

  phoenix_storybook: Improper Control of Generation of Code

  CVE-2026-8467May 20, 2026PhenixdigitalEPSS 2.11%

  Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.Pla