← All credits
Steffen Deusch
5 vulnerability records and advisories credit this contributor.
CVE-2026-117645
Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1
CVE-2026-56812
Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff
CVE-2026-56811
Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service
CVE-2026-64941
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
CVE-2026-58228
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>