djust
PyPI13 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting djustpage 1 of 1
- CVE-2026-55571HIGHCVSS 8.2EG 8.2fixed in 1.0.42026-08-25
vulnerable: 0.1.0 ... 1.0.4rc1 (60 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handle_mount sends a `{"type":"navigate","to":...}` frame when login_required, permission_requi…
- CVE-2026-61588MEDIUMCVSS 6.5EG 6.5fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client…
- CVE-2026-61589MEDIUMCVSS 6.3EG 6.3fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFacto…
- CVE-2026-61590HIGHCVSS 7.4EG 7.4fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's observability endpoints expose live view/session state and a remote method-invocation surface (`…
- CVE-2026-61591HIGHCVSS 8.1EG 8.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, the snapshot `state_json` embedded in the client page was resto…
- CVE-2026-61592HIGHCVSS 7.4EG 7.4fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client-chosen `session_id` with no binding to the authenticated user…
- CVE-2026-61593HIGHCVSS 8.1EG 8.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the SSE client→server POST endpoints are `@csrf_exempt` and the SSE GET stream endpoint had no Origin …
- CVE-2026-61594CRITICALCVSS 9.1EG 9.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes a mount via `check_view_auth`, not Django's `View.dispatch()` …
- CVE-2026-61595HIGHCVSS 7.7EG 7.7fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was stored in `threadin…
- CVE-2026-61596HIGHCVSS 7.1EG 7.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the W…
- CVE-2026-61597MEDIUMCVSS 5.1EG 5.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tags (`djust.components.templatetags.*`) render a developer/user-…
- CVE-2026-61598HIGHCVSS 7.1EG 7.1fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.mixins.model_binding.ModelBindingMixin` provides a default `update_model` event handler and is pa…
- CVE-2026-61599HIGHCVSS 8.8EG 8.8fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (40 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `_…
Check whether djust is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for djust CVEs against the assets you own.
Book a Demo →