CVE-2026-61589

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket "handlemount" and "ViewRuntime.buildrequest" rebuild an "HttpRequest" via "RequestFactory.get..." with no "HTTPHOST", so "request.gethost" defaulted...

Authorization Bypass Through User-Controlled Key

Overview djust is a Phoenix LiveView-style reactive components for Django with Rust-powered performance. Real-time UI updates over WebSocket, no JavaScript build step required. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the handlemount...