Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/20 1:35 p.m.49 views

CVE-2026-8467 Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

Code Injection vulnerability in phenixdigital phoenixstorybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.PlaygroundPreviewLive':handleevent/3...

9.5CVSS0.00907EPSS
SaveExploits0References4
Rows per page
Query Builder