Skip to content
OpenAdvisories

Vendor

djust-org

15 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    djust has an authorization bypass on the WebSocket/SSE mount path

    djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes a mount via `check_view_auth`, not Django's `View.dispatch()` chain. As a result, …