Current section

2 Advisories

Jump to
EEF-CVE-2026-117645 CVE-2026-117645

Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1

October 30, 2026

phoenix_html allows Cross-site Scripting in HEEx class attributes

April 12, 2022
CVSS
?
6.1 / 10.0 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Versions

< 3.0.4

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 50K 100K 150K 200K

this version

609 855

yesterday

78 873

last 7 days

552 288

all time

93 429 719

Last Updated

Oct 30, 2026

License

MIT

Build Tools

mix

Publisher

steffend steffend