phoenix_storybook (Hex) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Hex package phoenix_storybook, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2026-8467: Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute…
• CVE-2026-8469: Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated…
• CVE-2026-47068: Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic…