phoenixframework phoenix

• CVE-2026-56812 Medium 6.3 Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff 0.8%
• CVE-2026-56811 High 8.7 Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service 0.8%
• CVE-2026-32689 High 8.7 Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix 0.5%