Is phoenix safe to use?

phoenix has 3 known vulnerabilities on the latest version (1.8.9). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of phoenix?

The latest version of phoenix is 1.8.9, released 2026-07-07.

Does phoenix have known vulnerabilities?

Yes. phoenix has 3 known vulnerabilities. See depscope.dev/pkg/hex/phoenix for details.

Is phoenix deprecated?

No, phoenix is actively maintained. Latest release: 1.8.9 (2026-07-07).

What are alternatives to phoenix?

DepScope has no curated alternatives for phoenix at this time.

phoenix

hexv1.8.9

Productive. Reliable. Fast. A productive web framework that does not compromise speed or maintainability.

License MITpermissive176 versions5 maintainers0 deps384,026 weekly dl

phoenixframework/phoenix

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= beffc4da1e787e572121f68902c63daf4fe7d9c2 to fix known vulnerabilities

Moderate health score (60/100) — verify manually
2 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

13/25

security

15/15

maturity

13/15

community

0/15

popularity_floor

Vulnerabilities

2 high1 medium

Advisories (3)

Severity	ID	Summary	Fixed in
high	CVE-2026-32689	Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix	912ea181fd247c21dbcc49fb97d0053b947d81bf
high	CVE-2026-56811	Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service	16e295d2fccab185d1292322e2bee5d46c725c8a
medium	CVE-2026-56812	Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff	beffc4da1e787e572121f68902c63daf4fe7d9c2

OSS Scorecard

OpenSSF security posture score

6.2/10

moderate

Maintainer trust

Active maintainers (3m)

19

Contributors (12m)

32

Primary author dominance

26%

GitHub stars

22,977

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/hex/phoenix

First published · 2014-04-21T22:38:32.000000Z

Last updated · 2026-07-07T12:23:21.396353Z