phoenix_html
4.4.0
Phoenix view functions for working with HTML templates
Current section
2 Advisories
Jump to
Current section
2 Advisories
Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-117645.html
- https://github.com/phoenixframework/phoenix_html/commit/6ad3a1d7960891a468d54636054a98e11dfb5111
- https://github.com/phoenixframework/phoenix_html/commit/a47dc8944a773b7e9273d9691dc6744ec793f1de
- https://github.com/phoenixframework/phoenix_html/commit/d9e4e6b2d9be49e25fb6d6b4fdbb2008174f01a6
- https://hex.pm/packages/phoenix_html
phoenix_html allows Cross-site Scripting in HEEx class attributes
Affected Versions
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
609 855
yesterday
78 873
last 7 days
552 288
all time
93 429 719