phoenix@1.8.5 has CVE-2026-56812 #1065

Closed

Assignees

Labels

knocklabs/javascript

opened

This package is currently pinning phoenix@1.8.5, which is subject to a CVE (see GHSA-63mc-hw7g-86rr)

Upgrading to 1.8.9 would resolve the CVE.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

cjbell

Labels

knocklabs/javascript

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests