Current section
3 Advisories
Jump to
Current section
3 Advisories
Cross-session PubSub topic injection via URL parameter in phoenix_storybook
Affected Versions
>= 0.4.0 and < 1.1.0
References
- https://cna.erlef.org/cves/CVE-2026-47068.html
- https://github.com/phenixdigital/phoenix_storybook
- https://github.com/phenixdigital/phoenix_storybook/commit/6ee03f1c738d4436dde1b066cf65c80663d489f5
- https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-mrhx-6pw9-q5fh
- https://hex.pm/packages/phoenix_storybook
- https://nvd.nist.gov/vuln/detail/CVE-2026-47068
- https://osv.dev/vulnerability/EEF-CVE-2026-47068
Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook
Affected Versions
>= 0.2.0 and < 1.1.0
References
- https://cna.erlef.org/cves/CVE-2026-8469.html
- https://github.com/phenixdigital/phoenix_storybook
- https://github.com/phenixdigital/phoenix_storybook/commit/96d524690af0fe197a49f60d18e564a620b9ef81
- https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-833p-95jq-929q
- https://hex.pm/packages/phoenix_storybook
- https://nvd.nist.gov/vuln/detail/CVE-2026-8469
- https://osv.dev/vulnerability/EEF-CVE-2026-8469
Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground
Affected Versions
>= 0.5.0 and < 1.1.0
References
- https://cna.erlef.org/cves/CVE-2026-8467.html
- https://github.com/phenixdigital/phoenix_storybook
- https://github.com/phenixdigital/phoenix_storybook/commit/56ab8464d4375fa52db806148a06cce126ad481d
- https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-55hg-8qxv-qj4p
- https://hex.pm/packages/phoenix_storybook
- https://nvd.nist.gov/vuln/detail/CVE-2026-8467
- https://osv.dev/vulnerability/EEF-CVE-2026-8467
