djust
PyPI10 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting djustpage 1 of 1
- CVE-2026-55571HIGHCVSS 8.2EG 8.2✓ Fixed in 1.0.42026-08-25
vulnerable: 0.1.0 ... 1.0.4rc1 (60 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handle_mount sends a `{"type":"navigate","to":...}` frame when login_required, permission_requi…
- CVE-2026-61588MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client…
- CVE-2026-61589MEDIUMCVSS 6.3EG 6.3✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFacto…
- CVE-2026-61591HIGHCVSS 8.1EG 8.1✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, the snapshot `state_json` embedded in the client page was resto…
- CVE-2026-61592HIGHCVSS 7.4EG 7.4✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client-chosen `session_id` with no binding to the authenticated user…
- CVE-2026-61594CRITICALCVSS 9.1EG 9.1✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes a mount via `check_view_auth`, not Django's `View.dispatch()` …
- CVE-2026-61595HIGHCVSS 7.7EG 7.7✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.7rc1 (72 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was stored in `threadin…
- CVE-2026-61596HIGHCVSS 7.1EG 7.1✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the W…
- CVE-2026-61597MEDIUMCVSS 5.1EG 5.1✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tags (`djust.components.templatetags.*`) render a developer/user-…
- CVE-2026-61599HIGHCVSS 8.8EG 8.8✓ Fixed in 1.0.72026-09-16
vulnerable: 0.1.0 ... 1.0.6 (68 versions)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `_…
Check whether djust is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for djust CVEs against the assets you own.
Start Free Scan →