Skip to content
Threat Feed
Subscribe

Product

Phoenix (>= 1.7.0-Rc.0, < 1.7.24)

1 brief RSS
low advisory

Phoenix Transport Channel Exhaustion Denial of Service

The Phoenix web framework lacks limits on channels per transport, allowing an unauthenticated attacker to cause a DoS by exhausting Erlang VM process limits via CVE-2026-56811.

Phoenix +3 denial-of-service web-framework cve-2026-56811
1c