phoenix_html vulnerabilities (Hex)

2 vulnerabilities.

• phoenix_html Hex Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1 CVE-2026-117645 Fix available 5.3 MediumOctober 30, 2026
• phoenix_html Hex phoenix_html allows Cross-site Scripting in HEEx class attributes CVE-2021-46871 Fix available 6.1 MediumApril 12, 2022