CVE-2026-47068: Phoenix Pubsub Arbitrary Broadcastcve-2026-47068-phoenix-pubsub-arbitrary-broadcast
Broadcasting to a PubSub topic directly constructed from unverified user input allows an attacker to inject messages into arbitrary or private topics, potentially leading to cross-session interaction, unauthorized state modification, or session hijacking. Validate the topic using `Phoenix.Token.verify/4` or check ownership against the current authenticated s
