Phoenixframework Phoenix Html vulnerabilities

• phoenixframework phoenix html Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1 CVE-2026-117645 Fix available 5.3 MediumOctober 30, 2026
• phoenixframework phoenix html phoenix_html allows Cross-site Scripting in HEEx class attributes CVE-2021-46871 Fix available 6.1 MediumApril 12, 2022