CVE-2026-64941 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:phoenixframework:phoenix_live_view:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Phoenix.LiveView'"
    ],
    "packageName": "phoenix_live_view",
    "packageURL": "pkg:hex/phoenix_live_view",
    "product": "phoenix_live_view",
    "programFiles": [
      "lib/phoenix_live_view.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Phoenix.LiveView':redirect/2"
      },
      {
        "name": "'Elixir.Phoenix.LiveView':push_patch/2"
      }
    ],
    "repo": "https://github.com/phoenixframework/phoenix_live_view",
    "vendor": "phoenixframework",
    "versions": [
      {
        "lessThan": "1.0.19",
        "status": "affected",
        "version": "0.5.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.33",
        "status": "affected",
        "version": "1.1.0-rc.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.2.9",
        "status": "affected",
        "version": "1.2.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:phoenixframework:phoenix_live_view:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Phoenix.LiveView'"
    ],
    "packageName": "phoenixframework/phoenix_live_view",
    "packageURL": "pkg:github/phoenixframework/phoenix_live_view",
    "product": "phoenix_live_view",
    "programFiles": [
      "lib/phoenix_live_view.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Phoenix.LiveView':redirect/2"
      },
      {
        "name": "'Elixir.Phoenix.LiveView':push_patch/2"
      }
    ],
    "repo": "https://github.com/phoenixframework/phoenix_live_view",
    "vendor": "phoenixframework",
    "versions": [
      {
        "changes": [
          {
            "at": "0b8c733133466912f81adecaea72b6712370242e",
            "status": "unaffected"
          },
          {
            "at": "1c164f83df0bb922dfff9c60d125da5b0cfd6619",
            "status": "unaffected"
          },
          {
            "at": "2068b304d71907064b159b6bc60c5ad85a876ecf",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "b20dba3f65a380b2e4868dae03397f13d2daa070",
        "versionType": "git"
      }
    ]
  }
]