VYPR

phoenix_live_view

by Phoenix

CVEs (1)

  • CVE-2026-58228Jul 13, 2026
    risk 0.00cvss epss 0.00

    Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid_destination!/2 and Phoenix.LiveView.Utils.valid_live_navigation_dest…