Phoenixframework vulnerabilities
We track 4 vulnerabilities in Phoenixframework products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2026.
Latest Phoenixframework vulnerabilities
- 7.5 High severity
phoenix: Improper Check for Unusual or Exceptional Conditions
Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause a persistent client-side denial of service against every viewer of a presence c
- 7.5 High severity
phoenix: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Phoenix socket with a reachable channel tr
- 8.7 High severity
phoenix: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Transports.LongPoll':publish/4, when a POST request is received wit
- 7.5 High severity
Phoenix: Incorrect Authorization
socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.