www.phoenixframework.orgLatest stable Phoenix: 1.8.16, released (release notes). 33 stable releases since 2 Feb 2024.
38 releases on hex.pm since February 2024. One day in July shipped four of them, back to the 1.5 branch.
Brighter tiles had more releases. The outlined tile lists the branches released on 7 July 2026. Dashed tiles are still ahead.
On 7 July 2026 Phoenix shipped four releases on one day: 1.8.9, 1.7.24, 1.6.17 and 1.5.15. They fix CVE-2026-56811, where one client could open an unlimited number of channels and exhaust the server, and CVE-2026-56812, a presence key that crashed the JavaScript client.
1.5.15 came 1,366 days after 1.5.14 from October 2022, and 1.6.17 came 1,236 days after 1.6.16. Security fixes reach branches that had been quiet for more than three years.
The work on the 1.8 line goes on. 1.8.16 on 20 October fixes "a lot of connection handling races" in phoenix.js and lets each socket set its own channel limit.
As of 24 October 2026.
Phoenix can hold millions of connections, and in July 2026 that turned out to be a risk too. CVE-2026-56811 showed a single client could keep opening channels. The fix sets a default limit of 100 channels per connection, on every branch back to 1.5.
1.7.0 shipped on 24 February 2023 and the branch reached 1.7.24 in July 2026. 1.8.0 came on 5 August 2025, after five release candidates, and the X post for rc.0 lists dark mode, scopes and magic links.
1.8.16[phoenix.js] Fix a lot of connection handling races1.8.15[phx.gen.cert] Fix certificate not being accepted by Chromium1.8.14Fix timer leak in LongPoll fetch requests (only used in service or web workers)1.8.13Workaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed1.8.12[phx.gen.auth] Fix returnto session key not being cleared after logging in1.8.11Fix Phoenix crashing on boot if Mix is available, but not started1.8.10[Phoenix.CodeReloader] Fix "must restart your server" messages from code reloader when compile.lock mtime changes without a content change1.5.15Security fixes for CVE-2026-56811 and CVE-2026-56812.1.6.17Security fixes for CVE-2026-56811 and CVE-2026-56812.
Phoenix LiveView 1.2 is released with colocated css and more! Check the announcement for details!
LiveView 1.2, 13 June 2026.
Phoenix 1.8.0-rc.0 is out! Themes + dark mode toggle, streamlined generators, simplified layouts, revamped guides, scopes, and new magic links for phx.gen.auth.
Huge thanks to Steffen Deusch and @dashbit for making this release happen!
Phoenix 1.8.0-rc.0, 1 April 2025.
