Medium severity6.1NVD Advisory· Published Jan 10, 2023· Updated Jun 17, 2026
CVE-2021-46871
CVE-2021-46871
Description
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phoenix_htmlnpm | < 3.0.4 | 3.0.4 |
phoenix_htmlHex | < 3.0.4 | 3.0.4 |
Affected products
4- ghsa-coords2 versions
< 3.0.4+ 1 more
- (no CPE)range: < 3.0.4
- (no CPE)range: < 3.0.4
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-j3gg-r6gp-95q2nvdPatchThird Party AdvisoryADVISORY
- github.com/phoenixframework/phoenix_html/commit/62a0139fb716bcdce697f6221244bd81d321d620nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-5g2h-9x5v-5h3xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-46871ghsaADVISORY
News mentions
0No linked articles in our index yet.