Skip to content

phoenix_html (npm)

Advisories
1
Latest version
—
License
—
OpenSSF Scorecard
—

How to fix

Upgrading to 3.0.4 or later clears every advisory below that has a fix.

Upgrade commands
npm
npm install phoenix_html@3.0.4
yarn
yarn add phoenix_html@3.0.4
pnpm
pnpm add phoenix_html@3.0.4

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-5g2h-9x5v-5h3x
phoenix_html allows Cross-site Scripting in HEEx class attributes
Medium
EPSS 0.43%
< 3.0.4
3.0.4
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor