phoenix_live_view
Hex2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting phoenix_live_viewpage 1 of 1
- CVE-2026-58228MEDIUMCVSS 5.1EG 5.1✓ Fixed in 1.2.72026-07-13
vulnerable: 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6
Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.…
- CVE-2026-64941LOWCVSS 2.1EG 2.1✓ Fixed in 1.2.92026-08-10
vulnerable: 0.10.0 ... 1.2.8 (179 versions)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR. …
Check whether phoenix_live_view is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for phoenix_live_view CVEs against the assets you own.
Start Free Scan →