# \#phoenix-security

**URL:** https://forum.elixirforum.com/tag/phoenix-security/1188.md

[Latest](https://forum.elixirforum.com/latest.md) · [Categories](https://forum.elixirforum.com/categories.md) · [Tags](https://forum.elixirforum.com/tags.md)

---

## [Phoenix 1.3, 1.4, 1.5, and 1.6 security releases for wildcard check\_origin vulnerability](https://forum.elixirforum.com/t/phoenix-1-3-1-4-1-5-and-1-6-security-releases-for-wildcard-check-origin-vulnerability/50902)

<div class="topic-metadata">

**Author:** [@chrismccord](https://forum.elixirforum.com/u/chrismccord)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 6:44am UTC](https://forum.elixirforum.com/t/phoenix-1-3-1-4-1-5-and-1-6-security-releases-for-wildcard-check-origin-vulnerability/50902 "2022-10-14T06:44:22Z")

</div>

Phoenix 1.3.5, 1.4.18, 1.5.14, and 1.6.14 have been released to resolve a vulnerability in wildcard check\_origin configurations. Previously, our documentation points to a wilcard example of: check\_origin: \[ "//\*.othe…

---

## [Security Releases for Phoenix](https://forum.elixirforum.com/t/security-releases-for-phoenix/4143)

<div class="topic-metadata">

**Author:** [@chrismccord](https://forum.elixirforum.com/u/chrismccord)\
**Replies:** 0\
**Last updated:** [March 14, 2017, 9:17pm UTC](https://forum.elixirforum.com/t/security-releases-for-phoenix/4143 "2017-03-14T21:17:35Z")

</div>

A minor vulnerability has been disclosed for applications redirecting to URLs provided by user input. Only applications passing user input to Phoenix.Controller.redirect/2 are affected. For example, code such as the foll…