CVE-2026-117645 | phoenixframework phoenix_html up to 3.3.4/4.0.0/4.3.9 Attribute Escaping lib/phoenix_html.ex Phoenix.HTML.attributes_escape cross site scripting

October 30, 2026 Yanac

A vulnerability has been found in phoenixframework phoenix_html up to 3.3.4/4.0.0/4.3.9 and classified as problematic. Affected by this issue is the function Phoenix.HTML.attributes_escape of the file lib/phoenix_html.ex of the component Attribute Escaping. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-117645. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More