CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:phoenixframework:phoenix_live_view:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Phoenix.LiveView.Utils'"
    ],
    "packageName": "phoenix_live_view",
    "packageURL": "pkg:hex/phoenix_live_view",
    "product": "phoenix_live_view",
    "programFiles": [
      "lib/phoenix_live_view/utils.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Phoenix.LiveView.Utils':valid_destination!/2"
      },
      {
        "name": "'Elixir.Phoenix.LiveView.Utils':valid_live_navigation_destination!/2"
      }
    ],
    "repo": "https://github.com/phoenixframework/phoenix_live_view",
    "vendor": "phoenixframework",
    "versions": [
      {
        "lessThan": "1.2.7",
        "status": "affected",
        "version": "1.2.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:phoenixframework:phoenix_live_view:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Phoenix.LiveView.Utils'"
    ],
    "packageName": "phoenixframework/phoenix_live_view",
    "packageURL": "pkg:github/phoenixframework/phoenix_live_view",
    "product": "phoenix_live_view",
    "programFiles": [
      "lib/phoenix_live_view/utils.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Phoenix.LiveView.Utils':valid_destination!/2"
      },
      {
        "name": "'Elixir.Phoenix.LiveView.Utils':valid_live_navigation_destination!/2"
      }
    ],
    "repo": "https://github.com/phoenixframework/phoenix_live_view",
    "vendor": "phoenixframework",
    "versions": [
      {
        "lessThan": "86165533e311469a1b62093fd182d9d874de8106",
        "status": "affected",
        "version": "4b63216ae68886db99cf7772af23372d76c40e7e",
        "versionType": "git"
      }
    ]
  }
]