phoenix_live_view
Rich, real-time user experiences with server-rendered HTML
View on Github
Activity
- Latest release
- 2w ago
- Total releases
- 192
- Cadence
- ~6 days
- Last 12 months
- 37
Reach
- Downloads
- 44.0M
- Stars
- 6.8k
Details
- License
- MIT
- First release
- Aug 25, 2019
| Version | Released | |
|---|---|---|
1.2.11
patch
|
1.2.11
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.10
patch
|
1.2.10
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.0.19
patch
|
1.0.19
patch
Dependencies (8)
Changelog
Compare changes
|
|
1.1.33
patch
|
1.1.33
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.9
patch
|
1.2.9
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.8
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.8
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.7
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.7
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.6
patch
2 CVEs
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev
CVE-2026-58228
EEF-CVE-2026-58228
GHSA-5cgh-g58j-m9cq
Jul 13, 2026
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
Medium
Network
Low
None
SummaryCross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_destination!/2 functions in lib/phoenix_live_view/utils.ex rely on an internal uri_scheme/1 helper that only detects a scheme when the input's first byte is an ASCII letter. Inputs beginning with an ASCII control character or space fall through to a nil-returning clause, causing the URL to be treated as a safe relative path. Standard browsers implement the WHATWG URL parser, which strips leading C0 control and space characters before parsing. As a result, an input such as " javascript:alert(1)" is passed unchanged into <.link href={...}> and, when clicked, is parsed by the browser as a javascript: URL that executes attacker-controlled script in the victim's session. Applications that render user-supplied URLs (for example profile links, redirect targets, or external references) via <.link href={...}> are affected. This issue affects phoenix_live_view: from 1.2.2 before 1.2.7. WorkaroundsStrip leading ASCII control and space bytes (code points 0x00 through 0x20) from any untrusted URL before passing it to <.link href={...}>, or reject such inputs outright. This aligns application-level validation with the WHATWG URL parser used by browsers and prevents the scheme-detection bypass. Affected versions
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
Fixed in
1.2.7
References Updated Sep 08, 2026 · Source: OSV.dev |
1.2.6
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.5
patch
2 CVEs
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev
CVE-2026-58228
EEF-CVE-2026-58228
GHSA-5cgh-g58j-m9cq
Jul 13, 2026
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
Medium
Network
Low
None
SummaryCross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_destination!/2 functions in lib/phoenix_live_view/utils.ex rely on an internal uri_scheme/1 helper that only detects a scheme when the input's first byte is an ASCII letter. Inputs beginning with an ASCII control character or space fall through to a nil-returning clause, causing the URL to be treated as a safe relative path. Standard browsers implement the WHATWG URL parser, which strips leading C0 control and space characters before parsing. As a result, an input such as " javascript:alert(1)" is passed unchanged into <.link href={...}> and, when clicked, is parsed by the browser as a javascript: URL that executes attacker-controlled script in the victim's session. Applications that render user-supplied URLs (for example profile links, redirect targets, or external references) via <.link href={...}> are affected. This issue affects phoenix_live_view: from 1.2.2 before 1.2.7. WorkaroundsStrip leading ASCII control and space bytes (code points 0x00 through 0x20) from any untrusted URL before passing it to <.link href={...}>, or reject such inputs outright. This aligns application-level validation with the WHATWG URL parser used by browsers and prevents the scheme-detection bypass. Affected versions
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
Fixed in
1.2.7
References Updated Sep 08, 2026 · Source: OSV.dev |
1.2.5
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.4
patch
2 CVEs
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev
CVE-2026-58228
EEF-CVE-2026-58228
GHSA-5cgh-g58j-m9cq
Jul 13, 2026
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
Medium
Network
Low
None
SummaryCross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_destination!/2 functions in lib/phoenix_live_view/utils.ex rely on an internal uri_scheme/1 helper that only detects a scheme when the input's first byte is an ASCII letter. Inputs beginning with an ASCII control character or space fall through to a nil-returning clause, causing the URL to be treated as a safe relative path. Standard browsers implement the WHATWG URL parser, which strips leading C0 control and space characters before parsing. As a result, an input such as " javascript:alert(1)" is passed unchanged into <.link href={...}> and, when clicked, is parsed by the browser as a javascript: URL that executes attacker-controlled script in the victim's session. Applications that render user-supplied URLs (for example profile links, redirect targets, or external references) via <.link href={...}> are affected. This issue affects phoenix_live_view: from 1.2.2 before 1.2.7. WorkaroundsStrip leading ASCII control and space bytes (code points 0x00 through 0x20) from any untrusted URL before passing it to <.link href={...}>, or reject such inputs outright. This aligns application-level validation with the WHATWG URL parser used by browsers and prevents the scheme-detection bypass. Affected versions
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
Fixed in
1.2.7
References Updated Sep 08, 2026 · Source: OSV.dev |
1.2.4
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.3
patch
2 CVEs
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev
CVE-2026-58228
EEF-CVE-2026-58228
GHSA-5cgh-g58j-m9cq
Jul 13, 2026
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
Medium
Network
Low
None
SummaryCross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_destination!/2 functions in lib/phoenix_live_view/utils.ex rely on an internal uri_scheme/1 helper that only detects a scheme when the input's first byte is an ASCII letter. Inputs beginning with an ASCII control character or space fall through to a nil-returning clause, causing the URL to be treated as a safe relative path. Standard browsers implement the WHATWG URL parser, which strips leading C0 control and space characters before parsing. As a result, an input such as " javascript:alert(1)" is passed unchanged into <.link href={...}> and, when clicked, is parsed by the browser as a javascript: URL that executes attacker-controlled script in the victim's session. Applications that render user-supplied URLs (for example profile links, redirect targets, or external references) via <.link href={...}> are affected. This issue affects phoenix_live_view: from 1.2.2 before 1.2.7. WorkaroundsStrip leading ASCII control and space bytes (code points 0x00 through 0x20) from any untrusted URL before passing it to <.link href={...}>, or reject such inputs outright. This aligns application-level validation with the WHATWG URL parser used by browsers and prevents the scheme-detection bypass. Affected versions
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
Fixed in
1.2.7
References Updated Sep 08, 2026 · Source: OSV.dev |
1.2.3
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.2
patch
2 CVEs
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev
CVE-2026-58228
EEF-CVE-2026-58228
GHSA-5cgh-g58j-m9cq
Jul 13, 2026
Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>
Medium
Network
Low
None
SummaryCross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_destination!/2 functions in lib/phoenix_live_view/utils.ex rely on an internal uri_scheme/1 helper that only detects a scheme when the input's first byte is an ASCII letter. Inputs beginning with an ASCII control character or space fall through to a nil-returning clause, causing the URL to be treated as a safe relative path. Standard browsers implement the WHATWG URL parser, which strips leading C0 control and space characters before parsing. As a result, an input such as " javascript:alert(1)" is passed unchanged into <.link href={...}> and, when clicked, is parsed by the browser as a javascript: URL that executes attacker-controlled script in the victim's session. Applications that render user-supplied URLs (for example profile links, redirect targets, or external references) via <.link href={...}> are affected. This issue affects phoenix_live_view: from 1.2.2 before 1.2.7. WorkaroundsStrip leading ASCII control and space bytes (code points 0x00 through 0x20) from any untrusted URL before passing it to <.link href={...}>, or reject such inputs outright. This aligns application-level validation with the WHATWG URL parser used by browsers and prevents the scheme-detection bypass. Affected versions
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
Fixed in
1.2.7
References Updated Sep 08, 2026 · Source: OSV.dev |
1.2.2
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.32
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.32
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.1
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.1
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.0
minor
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.0
minor
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.31
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.31
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.0-rc.3
pre
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.0-rc.3
pre
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.0-rc.2
pre
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.0-rc.2
pre
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.30
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.30
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.0-rc.1
pre
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.0-rc.1
pre
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.29
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.29
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.2.0-rc.0
pre
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.2.0-rc.0
pre
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.28
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.28
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.27
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.27
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.26
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.26
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.25
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.25
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.24
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.24
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.23
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.23
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.22
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.22
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.21
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.21
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.20
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.20
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.19
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.19
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.18
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.18
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.17
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.17
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.16
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.16
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.15
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.15
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.14
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.14
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.13
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.13
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.12
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.12
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.11
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.11
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.10
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.10
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.9
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.9
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.8
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.8
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.0.18
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.0.18
patch
Dependencies (8)
Changelog
Compare changes
|
|
1.1.7
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.7
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.6
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.6
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.5
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.5
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.4
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.4
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.3
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.3
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|
|
1.1.2
patch
1 CVE
CVE-2026-64941
EEF-CVE-2026-64941
GHSA-36m4-rm57-3prf
Aug 10, 2026
Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
Low
Network
Low
None
SummaryURL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a
This issue affects phoenix_live_view: from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. WorkaroundsReject any untrusted value containing ASCII tab, LF or CR before passing it as ConfigurationsThe application must pass an externally influenced value as Affected versions
0.10.0
0.11.0
0.11.1
0.12.0
0.12.1
0.13.0
0.13.1
0.13.2
0.13.3
0.14.0
0.14.1
0.14.2
+ 167 more Show less
0.14.3
0.14.4
0.14.5
0.14.6
0.14.7
0.14.8
0.15.0
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.15.7
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.0
0.17.1
0.17.10
0.17.11
0.17.12
0.17.13
0.17.14
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.18.0
0.18.1
0.18.10
0.18.11
0.18.12
0.18.13
0.18.14
0.18.15
0.18.16
0.18.17
0.18.18
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.18.8
0.18.9
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.20.0
0.20.1
0.20.10
0.20.11
0.20.12
0.20.13
0.20.14
0.20.15
0.20.16
0.20.17
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.20.7
0.20.8
0.20.9
0.5.0
0.5.1
0.5.2
0.6.0
0.6.0-dev
0.7.0
0.7.1
0.8.0
0.8.1
0.9.0
1.0.0
1.0.0-rc.0
1.0.0-rc.1
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.0-rc.0
1.1.0-rc.1
1.1.0-rc.2
1.1.0-rc.3
1.1.0-rc.4
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.2
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.31
1.1.32
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.0-rc.0
1.2.0-rc.1
1.2.0-rc.2
1.2.0-rc.3
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
Fixed in
1.0.19
1.1.33
1.2.9
References
Updated Sep 08, 2026 · Source: OSV.dev |
1.1.2
patch
Dependencies (9)
+ 1 more
Changelog
Compare changes
|