What’s Vulnerable › Products

phoenixframework phoenix vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your phoenixframework phoenix version is affected

Latest phoenixframework phoenix vulnerabilities

• CVE-2026-56812 — Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff (CVSS 7.5)
• CVE-2026-56811 — Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service (CVSS 7.5)
• CVE-2026-32689 — Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix (CVSS 8.7)
• CVE-2022-42975 — (CVSS 7.5)
• CVE-2017-1000163 — (CVSS 6.1)