Packages

phoenix

1.8.9
1.8.9 1.8.8 1.8.7 1.8.6 1.8.5 1.8.4 1.8.3 1.8.2 1.8.1 1.8.0 1.8.0-rc.4 1.8.0-rc.3 1.8.0-rc.2 1.8.0-rc.1 1.8.0-rc.0 1.7.24 1.7.23 1.7.22 1.7.21 1.7.20 1.7.19 1.7.18 1.7.17 1.7.16 1.7.15 1.7.14 1.7.13 1.7.12 1.7.11 1.7.10 1.7.9 1.7.8 1.7.7 1.7.6 1.7.5 1.7.4 1.7.3 1.7.2 1.7.1 1.7.0 1.7.0-rc.3 1.7.0-rc.2 1.7.0-rc.1 1.7.0-rc.0 1.6.17 1.6.16 1.6.15 1.6.14 1.6.13 1.6.12 1.6.11 1.6.10 1.6.9 1.6.8 1.6.7 1.6.6 1.6.5 1.6.4 1.6.3 1.6.2 1.6.1 1.6.0 1.6.0-rc.1 1.6.0-rc.0 1.5.15 1.5.14 1.5.13 1.5.12 1.5.11 1.5.10 1.5.9 1.5.8 1.5.7 1.5.6 1.5.5 1.5.4 1.5.3 1.5.2 1.5.1 1.5.0 1.5.0-rc.0 1.4.18 1.4.17 1.4.16 1.4.15 1.4.14 1.4.13 1.4.12 1.4.11 1.4.10 1.4.9 1.4.8 1.4.7 1.4.6 1.4.5 1.4.4 1.4.3 1.4.2 1.4.1 1.4.0 1.4.0-rc.3 1.4.0-rc.2 1.4.0-rc.1 1.4.0-rc.0 1.3.5 1.3.4 1.3.3 1.3.2 1.3.1 1.3.0 1.3.0-rc.3 1.3.0-rc.2 1.3.0-rc.1 1.3.0-rc.0 1.2.5 1.2.4 1.2.3 1.2.2 1.2.1 1.2.0 1.2.0-rc.1 1.2.0-rc.0 1.1.9 1.1.8 1.1.7 1.1.6 1.1.5 1.1.4 1.1.3 1.1.2 1.1.1 1.1.0 1.0.6 1.0.5 1.0.4 1.0.3 1.0.2 1.0.1 1.0.0 0.17.1 0.17.0 0.16.1 0.16.0 0.15.0 0.14.0 0.13.1 0.13.0 0.12.0 0.11.0 0.10.0 0.9.0 0.8.0 0.7.2 0.7.1 0.7.0 0.6.2 0.6.1 0.6.0 0.5.0 0.4.1 0.4.0 0.3.1 0.3.0 0.2.11 0.2.10 0.2.9 0.2.8 0.2.7 0.2.6 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.0

Productive. Reliable. Fast. A productive web framework that does not compromise speed or maintainability.

HexDocs HexPreview

Current section

5 Advisories

Jump to
Readme
176 Versions
10 Dependencies
669 Dependants
5 Advisories
Activity
EEF-CVE-2026-56812 CVE-2026-56812 GHSA-63mc-hw7g-86rr

Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff

July 07, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Versions

>= 1.7.0-rc.0 and < 1.7.24 >= 1.8.0-rc.0 and < 1.8.9 >= 1.2.0-rc.0 and < 1.5.15 >= 1.6.0-rc.0 and < 1.6.17
EEF-CVE-2026-56811 CVE-2026-56811 GHSA-6983-jfq8-485w

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

July 07, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.11.0 and < 1.5.15 >= 1.6.0-rc.0 and < 1.6.17 >= 1.7.0-rc.0 and < 1.7.24 >= 1.8.0-rc.0 and < 1.8.9
EEF-CVE-2026-32689 CVE-2026-32689 GHSA-628h-q48j-jr6q

Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix

May 05, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 1.7.0 and < 1.7.22 >= 1.8.0 and < 1.8.6
GHSA-p8f7-22gq-m7j9 CVE-2022-42975

Phoenix before 1.6.14 mishandles check_origin wildcarding

October 17, 2022
CVSS
?
7.5 / 10.0 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Versions

< 1.6.14
GHSA-cmfh-8f8r-fj96 CVE-2017-1000163

Phoenix Arbitrary URL Redirect

April 12, 2022
CVSS
?
6.1 / 10.0 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Versions

< 1.0.6 >= 1.1.0 and < 1.1.8 >= 1.2.0 and < 1.2.3

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 20K 40K 60K 80K

this version

53 858

yesterday

20 462

last 7 days

300 797

all time

151 857 843

Last Updated

Jul 07, 2026

License

MIT

Build Tools

mix

Publisher

steffend steffend

Links

Owners