phoenix
v1.8.16Peace of mind from prototype to production
- Maintenance
- Active89 commits in 3 months · bus factor 2
- License
- MITPermissive · OSI-approved
- Security
- 3 advisories2 high, 1 medium · Scorecard 6.7/10
- Supported versions
- 4 lines supportednewest 1.8 · oldest 1.5 · 5 ended
23.2k stars · 3.2k forks · 51 open issues · last release 26 days ago · data checked 2 hours ago
Security advisories
All advisories on GitHubThe 3 most recent advisories published by the maintainers: 2 high, 1 medium. Check the patched version against the one you run.
- highCVE-2026-56811Jul 7, 2026Unbounded channel joins per transport enables DoS over few connections
- Affected
- >= 0.11.0 and < 1.5.15; >= 1.6.0-rc.0 and < 1.6.17; >= 1.7.0-rc.0 and < 1.7.24; >= 1.8.0-rc.0 and < 1.8.9
- Patched in
- 1.5.15; 1.6.17; 1.7.24; 1.8.9
- mediumCVE-2026-56812Jul 7, 2026Presence keys colliding with `Object.prototype` members break existence checks
- Affected
- >= 1.2.0-rc.0 and < 1.5.15; >= 1.6.0-rc.0 and < 1.6.17; >= 1.7.0-rc.0 and < 1.7.24; >= 1.8.0-rc.0 and < 1.8.9
- Patched in
- 1.5.15; 1.6.17; 1.7.24; 1.8.9
- highCVE-2026-32689May 5, 2026Long-poll NDJSON body splitting causes large memory allocation in Phoenix
- Affected
- >= 1.7.0 and < 1.7.22 and < 1.8.6
- Patched in
- 1.7.22, 1.8.6