P
Vendor security profile
phoenixframework
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit2
Patch rate%100
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
2
1
0
0
CVE KEV
CVE severity distribution
3toplam CVE
High1 (33%)
Medium1 (33%)
Low1 (33%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%67
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
2.1
CVE-2026-64941
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
P
Patch verifiedEPSS %1
6.3
CVE-2026-56812
Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff
P
Patch verifiedEPSS %1
8.7
CVE-2026-56811
Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service
P
Patch verifiedEPSS %1