Skip to content
Threat Feed
Subscribe

Product

Phoenix

2 briefs RSS
medium advisory

Plug.Cowboy HTTP/2 Atom Table Exhaustion DoS

An unauthenticated remote denial-of-service vulnerability in Plug.Cowboy allows attackers to exhaust the BEAM atom table via HTTP/2 requests, crashing the Erlang VM.

plug_cowboy +1 denial-of-service http2 atom-exhaustion
2r 1t 1c
medium advisory

Phoenix Long-Poll Transport Denial-of-Service Vulnerability

An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to exhaust server memory by sending a series of crafted HTTP requests, affecting LiveView apps with a public Longpoll socket or Phoenix.Socket with longpoll option.

Phoenix dos webserver
2r 2t 1c