| Package | Affected versions | Patched versions |
|---|---|---|
| phoenix | < 1.6.14 | 1.6.14 |
socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free