phoenix vulnerabilities (Hex)
5 vulnerabilities.
-
phoenixHex Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff 6.3 Medium -
phoenixHex Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service 8.7 High -
phoenixHex Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix 8.7 High -
phoenixHex Phoenix before 1.6.14 mishandles check_origin wildcarding 7.5 High -
phoenixHex Phoenix Arbitrary URL Redirect 6.1 Medium