CVE Daily – Phoenix Framework (High+Critical) https://cvedaily.com/pages/tags/phoenix-framework.html CVE Daily – Phoenix Framework (High+Critical) en Wed, 03 Jun 2026 21:26:52 +0000 [High] CVE-2026-32689 – Allocation of Resources Without Limits or Throttling vulnerability in phoenixfra... https://nvd.nist.gov/vuln/detail/CVE-2026-32689 https://nvd.nist.gov/vuln/detail/CVE-2026-32689 Tue, 05 May 2026 16:16:11 +0000 High CVE-2026-32689

Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Transports.LongPoll':publish/4, when a POST request is received with Content-Type: application/x-ndjson, the request body is split on newline characters using String.split/2 with no limit on the number of…

CVSS: 8.7 · CWE: CWE-770

View on NVD

]]>