CVE-2026-61593

djust (a Phoenix LiveView-style reactive server-side rendering library for Django with Rust) is vulnerable to Cross-Site Request Forgery (CSRF) on its Server-Sent Events (SSE) transport prior to version 1.0.7 . The root cause: SSE POST endpoints were @csrf_exempt, the SSE GET stream endpoint lack...

EUVD-2022-27902

Malicious code in bioql PyPI...