phoenix_live_view vulnerabilities (Hex)

2 vulnerabilities.

• phoenix_live_view Hex Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR CVE-2026-64941 Fix available 2.1 LowAugust 10, 2026
• phoenix_live_view Hex Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link> CVE-2026-58228 Fix available 5.1 MediumJuly 13, 2026