EUVD-2026-65600

🗓️ 25 Aug 2026 16:05:49Reported by EUVDType

djust before 1.0.4: WebSocket auth bypass allows unauthorized event handling after mount redirect.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-55571	25 Aug 202618:35	–	circl
CVE	CVE-2026-55571	25 Aug 202616:05	–	cve
Cvelist	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	cvelist
Github Security Blog	djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:06	–	github
NVD	CVE-2026-55571	25 Aug 202617:17	–	nvd
OSV	GHSA-XX4J-W367-7247 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:06	–	osv
OSV	PYSEC-2026-3829 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	10 Sep 202609:44	–	osv
Positive Technologies	PT-2026-81390	25 Aug 202600:00	–	ptsecurity
PyPA	djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	10 Sep 202609:44	–	pypa
Vulnrichment	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "682c235a-8f8f-3e2e-920b-36e992fe197d",
        "vendor": {
          "name": "djust-org"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "98bb2b52-0f9b-3362-85f7-d083aaed3ec5",
        "product": {
          "name": "djust",
          "vendor": {
            "name": "djust-org"
          }
        },
        "product_version": "< 1.0.4"
      }
    ]
  }
]

Source	Link
github	www.github.com/djust-org/djust/security/advisories/GHSA-xx4j-w367-7247
github	www.github.com/djust-org/djust/pull/1780
github	www.github.com/djust-org/djust/commit/1ae8aa9246b80477de7ddc4d90319a3b267bef04
github	www.github.com/djust-org/djust/releases/tag/v1.0.4

25 Aug 2026 17:56Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.18.2

EPSS0.00283

SSVC