CVE-2022-42975High severity
← Search results
AUTOMATICALLY VERIFIEDOFFICIAL VENDOR SOURCECOLLECTED 24 SEP 2026
Phoenix Framework Project · AUTOMATIC DISCOVERY
Phoenix Framework Lifecycle policy
Phoenix Framework is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This record passed BlackTree's automatic primary-source checks with a confidence score of 82. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.
This discovery does not establish a product-specific support or retirement date. A missing date does not mean support continues.
Product overview
Phoenix Framework is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Application development components
- Versioned runtime or build interfaces
- Security and compatibility maintenance
Typical use
Used by software teams to build, run or maintain applications.
Deployment
Included in source projects, application dependencies, build systems or managed runtimes.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | Phoenix Framework |
|---|---|
| Release | Lifecycle policy |
| Start or release | Not extracted |
| Lifecycle boundary | Continuous or not dated in the source |
| Date precision | Unknown |
Known exploited vulnerabilities
Catalogue updated 1 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
Checked 27 Sep 2026OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
CVE-2026-56811High severity
Phoenix: Unbounded channel joins per transport enables DoS over few connections
OSV recordCVE-2026-32689High severity
Phoenix: Long-poll NDJSON body splitting causes large memory allocation
OSV recordCVE-2026-56812Medium severity
Phoenix: Presence keys colliding with `Object.prototype` members break existence checks
OSV recordCVE-2017-1000163Medium severity
Phoenix Arbitrary URL Redirect
OSV recordCVE-2026-56812Unknown severity
Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff
OSV recordCVE-2026-56811Unknown severity
Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service
OSV recordCVE-2026-32689Unknown severity
Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix
OSV recordSource evidence
PRIMARYManual
Phoenix Framework official lifecycle source
SECURITY.md | Security Policy | Supported versions | Phoenix applies bug fixes only to the latest minor branch. Security patches are available for the last 4 minor branches: | Announcements
Publisher identity used by product-specific official-source collectors.
Open official vendor source