Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

phoenix_html

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
Hex

Advisories 2

  • CVE-2026-117645Medium 5.3

    Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1

    Affected: from 1.0.0, fixed in 3.3.5; from 4.0.0, fixed in 4.4.0; from 1.0.0, fixed in 3.3.5; from 4.0.0, fixed in 4.4.0.

  • CVE-2021-46871Medium 6.1

    tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.

    Affected: fixed in 3.0.4.