CVE-2026-53661: Insecure Phoenix Cookie Configcve-2026-53661-insecure-phoenix-cookie-config
Missing `secure: true` on Phoenix session cookie or remember-me cookie options. Cookies sent over unencrypted HTTP can be intercepted by an active network attacker. Ensure production configurations set `secure: true`.