Vendor
djust-org
15 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.1
djust has an authorization bypass on the WebSocket/SSE mount path
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes a mount via `check_view_auth`, not Django's `View.dispatch()` chain. As a result, …