djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

🗓️ 10 Sep 2026 09:44:56Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 8 Views

Auth bypass in djust 1.0.4: LiveView redirect doesn't close socket, allowing unauth event dispatch.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-55571	25 Aug 202618:35	–	circl
CVE	CVE-2026-55571	25 Aug 202616:05	–	cve
Cvelist	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	cvelist
EUVD	EUVD-2026-65600	25 Aug 202616:05	–	euvd
Github Security Blog	djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:06	–	github
NVD	CVE-2026-55571	25 Aug 202617:17	–	nvd
OSV	GHSA-XX4J-W367-7247 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:06	–	osv
OSV	PYSEC-2026-3829 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	10 Sep 202609:44	–	osv
Positive Technologies	PT-2026-81390	25 Aug 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls	25 Aug 202616:05	–	vulnrichment

Vulners

Node

pypi djustRange0–1.0.4

Source	Link
github	www.github.com/djust-org/djust/security/advisories/GHSA-xx4j-w367-7247
github	www.github.com/djust-org/djust/pull/1780
github	www.github.com/djust-org/djust/commit/1ae8aa9246b80477de7ddc4d90319a3b267bef04
github	www.github.com/djust-org/djust
pypi	www.pypi.org/project/djust
github	www.github.com/advisories/GHSA-xx4j-w367-7247
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-55571

10 Sep 2026 11:02Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.18.2

EPSS0.00283

SSVC