Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 01:07 UTC Customize Public modeDiscuss ChangeIntel on Discord

Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff

Exact source revision recorded 24 Oct 2026 13:17:17 UTC. It does not establish the source's current position. Latest evidence.

osv · EEF-CVE-2026-56812

Published

phoenix

Hex

SEMVER · introduced 1.2.0-rc.0 → fixed 1.5.15

SEMVER · introduced 1.6.0-rc.0 → fixed 1.6.17

SEMVER · introduced 1.7.0-rc.0 → fixed 1.7.24

SEMVER · introduced 1.8.0-rc.0 → fixed 1.8.9

118 explicitly affected versions

1.2.0, 1.2.0-rc.0, 1.2.0-rc.1, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3.0, 1.3.0-rc.0, 1.3.0-rc.1, 1.3.0-rc.2, 1.3.0-rc.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.4.0, 1.4.0-rc.0, 1.4.0-rc.1, 1.4.0-rc.2, 1.4.0-rc.3, 1.4.1, 1.4.10, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.5.0, 1.5.0-rc.0, 1.5.1, 1.5.10, 1.5.11, 1.5.12, 1.5.13, 1.5.14, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6.0, 1.6.0-rc.0, 1.6.0-rc.1, 1.6.1, 1.6.10, 1.6.11, 1.6.12, 1.6.13, 1.6.14, 1.6.15, 1.6.16, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.7.0, 1.7.0-rc.0, 1.7.0-rc.1, 1.7.0-rc.2, 1.7.0-rc.3, 1.7.1, 1.7.10, 1.7.11, 1.7.12, 1.7.13, 1.7.14, 1.7.15, 1.7.16, 1.7.17, 1.7.18, 1.7.19, 1.7.2, 1.7.20, 1.7.21, 1.7.22, 1.7.23, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8.0, 1.8.0-rc.0, 1.8.0-rc.1, 1.8.0-rc.2, 1.8.0-rc.3, 1.8.0-rc.4, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8

phoenix

npm

SEMVER · introduced 1.2.0-rc.0 → fixed 1.5.15

SEMVER · introduced 1.6.0-rc.0 → fixed 1.6.17

SEMVER · introduced 1.7.0-rc.0 → fixed 1.7.24

SEMVER · introduced 1.8.0-rc.0 → fixed 1.8.9

https://github.com/phoenixframework/phoenix

Unspecified ecosystem

GIT · introduced 2270aaf21bd02c6a6a1022820564efb605a97655 → fixed 7f7b971c1ea0994e3fbd1c11ddb05e780bd38ad8 → fixed 89a1c4be161e436241e12b2378a719904b9bd96f → fixed b90b22521465ece00eb5a19d5aa2b9465b209c85 → fixed beffc4da1e787e572121f68902c63daf4fe7d9c2

85 explicitly affected versions

v1.5.13, v1.6.16, v1.7.23, v1.8.8, v1.8.7, v1.8.6, v1.7.22, v1.8.5, v1.8.4, v1.8.3, v1.8.2, v1.8.1, v1.8.0, v1.8.0-rc.4, v1.8.0-rc.3, v1.8.0-rc.2, v1.8.0-rc.1, v1.8.0-rc.0, v1.7.20, v1.7.19, v1.7.18, v1.7.16, v1.7.15, v1.7.14, v1.7.13, v1.7.12, v1.7.11, v1.7.10, v1.7.9, v1.7.8, v1.7.7, v1.7.6, v1.7.5, v1.7.4, v1.7.3, v1.7.2, v1.7.1, v1.7.0, v1.7.0-rc.3, v1.7.0-rc.2, v1.7.0-rc.1, v1.7.0-rc.0, v1.6.15, v1.6.14, v1.6.13, v1.6.12, v1.6.11, v1.6.10, v1.6.7, v1.6.6, v1.6.5, v1.6.4, v1.6.3, v1.6.2, v1.6.1, v1.6.0, v1.6.0-rc.1, v1.6.0-rc.0, v1.5.12, v1.5.11, v1.5.10, v1.5.9, v1.5.8, v1.5.7, v1.5.6, v1.5.5, v1.5.4, v1.5.3, v1.5.2, v1.5.1, v1.5.0, v1.5.0-rc.0, v1.4.0, v1.4.0-rc.3, v1.4.0-rc.2, v1.4.0-rc.1, v1.4.0-rc.0, v1.3.0, v1.3.0-rc.3, v1.3.0-rc.2, v1.3.0-rc.1, v1.3.0-rc.0, v1.2.0, v1.2.0-rc.1, v1.2.0-rc.0

Original vendor version evidence · not evaluated as a NuGet range
{"ranges":[{"type":"GIT","repo":"https://github.com/phoenixframework/phoenix","events":[{"introduced":"2270aaf21bd02c6a6a1022820564efb605a97655"},{"fixed":"7f7b971c1ea0994e3fbd1c11ddb05e780bd38ad8"},{"fixed":"89a1c4be161e436241e12b2378a719904b9bd96f"},{"fixed":"b90b22521465ece00eb5a19d5aa2b9465b209c85"},{"fixed":"beffc4da1e787e572121f68902c63daf4fe7d9c2"}]}],"versions":["v1.5.13","v1.6.16","v1.7.23","v1.8.8","v1.8.7","v1.8.6","v1.7.22","v1.8.5","v1.8.4","v1.8.3","v1.8.2","v1.8.1","v1.8.0","v1.8.0-rc.4","v1.8.0-rc.3","v1.8.0-rc.2","v1.8.0-rc.1","v1.8.0-rc.0","v1.7.20","v1.7.19","v1.7.18","v1.7.16","v1.7.15","v1.7.14","v1.7.13","v1.7.12","v1.7.11","v1.7.10","v1.7.9","v1.7.8","v1.7.7","v1.7.6","v1.7.5","v1.7.4","v1.7.3","v1.7.2","v1.7.1","v1.7.0","v1.7.0-rc.3","v1.7.0-rc.2","v1.7.0-rc.1","v1.7.0-rc.0","v1.6.15","v1.6.14","v1.6.13","v1.6.12","v1.6.11","v1.6.10","v1.6.7","v1.6.6","v1.6.5","v1.6.4","v1.6.3","v1.6.2","v1.6.1","v1.6.0","v1.6.0-rc.1","v1.6.0-rc.0","v1.5.12","v1.5.11","v1.5.10","v1.5.9","v1.5.8","v1.5.7","v1.5.6","v1.5.5","v1.5.4","v1.5.3","v1.5.2","v1.5.1","v1.5.0","v1.5.0-rc.0","v1.4.0","v1.4.0-rc.3","v1.4.0-rc.2","v1.4.0-rc.1","v1.4.0-rc.0","v1.3.0","v1.3.0-rc.3","v1.3.0-rc.2","v1.3.0-rc.1","v1.3.0-rc.0","v1.2.0","v1.2.0-rc.1","v1.2.0-rc.0"],"database_specific":{"source":"https://cna.erlef.org/osv/EEF-CVE-2026-56812.json"}}

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 8 Nov 01:07 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current