djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

🗓️ 25 Aug 2026 16:06:31Reported by GitHub Advisory DatabaseType

djust LiveView WebSocket not closed after auth redirect allows unauthenticated event dispatch.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-55571	25 Aug 202618:35	–	circl
CVE	CVE-2026-55571	25 Aug 202616:05	–	cve
Cvelist	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	cvelist
EUVD	EUVD-2026-65600	25 Aug 202616:05	–	euvd
NVD	CVE-2026-55571	25 Aug 202617:17	–	nvd
OSV	GHSA-XX4J-W367-7247 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:06	–	osv
OSV	PYSEC-2026-3829 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	10 Sep 202609:44	–	osv
Positive Technologies	PT-2026-81390	25 Aug 202600:00	–	ptsecurity
PyPA	djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	10 Sep 202609:44	–	pypa
Vulnrichment	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	vulnrichment

Vulners

Node

djustRange<1.0.4pip

Source	Link
github	www.github.com/djust-org/djust/security/advisories/GHSA-xx4j-w367-7247
github	www.github.com/djust-org/djust/pull/1780
github	www.github.com/djust-org/djust/commit/1ae8aa9246b80477de7ddc4d90319a3b267bef04
github	www.github.com/advisories/GHSA-xx4j-w367-7247

25 Aug 2026 16:06Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.18.2

EPSS0.00283

SSVC