DJ
Product
djust
14
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 9Medium 3Low 1
Watch
Add djust to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-61588 | 6.5 | Sep 16 | djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client Affected: < 1.0.7 |
| CVE-2026-61589 | 6.3 | Sep 16 | djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path Affected: < 1.0.7 |
| CVE-2026-61597 | 5.1 | Sep 16 | djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags Affected: < 1.0.7 |
Showing 3