Vulnerability Database · PyPI · djust · Version

djust 0.3.2

0.3.2 is affected by 28 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 1.2.6.

Critical 2 High 20 Medium 6 Low 0 Unrated 0

Released 18 Feb 2026 Licence MIT Also known from other sources 28 Newer releases 72 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

djust 0.3.2 vulnerabilities

28 vulnerabilities cover djust 0.3.2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-61594: djust Authorization Bypass Vulnerability in WebSocket/SSE Transport 9.1 critical 1.0.7 01 Oct 2026
CVE-2026-61594: djust Package Authorization Bypass on WebSocket/SSE Mount Path 9.1 critical 1.0.7 16 Sep 2026
CVE-2026-61599: djust Package Unauthenticated Arbitrary Module Import Vulnerability 8.8 high 1.0.7 01 Oct 2026
CVE-2026-61599: djust Package Unauthenticated Arbitrary Module Import Vulnerability 8.8 high 1.0.7 16 Sep 2026
XSS Vulnerability in djust Package: Context Safety Grant Inheritance Issue 8.7 high 1.1.2 17 Sep 2026
CVE-2026-55571: djust Authentication Bypass in LiveView Event Handling 8.2 high 1.0.4 10 Sep 2026
CVE-2026-55571: djust Package Authentication Bypass via LiveView WebSocket 8.2 high 1.0.4 25 Aug 2026
CVE-2026-61593: djust Cross-Site Request Forgery Vulnerability in SSE Transport 8.1 high 1.0.7 01 Oct 2026
CVE-2026-61591: djust Privilege Escalation via Unsigned Client State Snapshot 8.1 high 1.0.7 01 Oct 2026
CVE-2026-61591: djust Package Privilege Escalation via Unsigned Client State Snapshot 8.1 high 1.0.7 16 Sep 2026
CVE-2026-61593: djust Package Suffers from Cross-Site Request Forgery Vulnerability in SSE Transport 8.1 high 1.0.7 16 Sep 2026
CVE-2026-61595: djust Package Multi-Tenant Isolation Vulnerability Exposes Data 7.7 high 1.0.7 01 Oct 2026
CVE-2026-61595: djust Package Multi-Tenant Isolation Vulnerability Exposes Sensitive Data 7.7 high 1.0.7 16 Sep 2026
CVE-2026-61592: djust Package Vulnerability - Session Hijacking via Unbound SSE Sessions 7.4 high 1.0.7 01 Oct 2026
CVE-2026-61590: djust Package Exposes Observability Endpoints with Insufficient Security 7.4 high 1.0.7 01 Oct 2026
CVE-2026-61592: djust Package Session Hijack Vulnerability Due to Insecure SSE Session Management 7.4 high 1.0.7 16 Sep 2026
CVE-2026-61590: djust Package Exposes Sensitive Observability Endpoints 7.4 high 1.0.7 16 Sep 2026
CVE-2026-61596: djust Package Experiences IDOR Vulnerability Leading to Unauthorized Access 7.1 high 1.0.7 01 Oct 2026
CVE-2026-61598: djust Package Vulnerability - Client Mass-Assignment of View Attributes 7.1 high 1.0.7 01 Oct 2026
CVE-2026-61596: djust Package Suffers from Broken Object-Level Access Control 7.1 high 1.0.7 16 Sep 2026
CVE-2026-61598: djust Package Vulnerability - Client Mass-Assignment of View Attributes 7.1 high 1.0.7 16 Sep 2026
CVE-2026-61588: djust Package Exposes Sensitive Fields in Public Views 6.5 medium 1.0.7 01 Oct 2026
CVE-2026-61588: djust Package Exposes Sensitive Fields in Public Views 6.5 medium 1.0.7 16 Sep 2026
CVE-2026-61589: djust Package WebSocket Request Vulnerability Leading to Tenant Misresolution 6.3 medium 1.0.7 01 Oct 2026
CVE-2026-61589: djust Package WebSocket Request Misconfiguration Leading to Tenant Resolution Issues 6.3 medium 1.0.7 16 Sep 2026
CVE-2026-61597: djust Package Vulnerable to Stored/Reflected XSS via javascript: URLs 5.1 medium 1.0.7 01 Oct 2026
CVE-2026-61597: djust Package Vulnerable to Stored/Reflected XSS via javascript: URLs 5.1 medium 1.0.7 16 Sep 2026
XSS Vulnerability in djust Package: Unescaped Markup Exposure N/A high 1.1.1 17 Sep 2026

Looking for another version, or everything Vulert holds for djust?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About djust 0.3.2

Is djust 0.3.2 vulnerable?

Yes. 28 vulnerabilities in the Vulert database cover djust 0.3.2: 2 critical, 20 high, 6 medium and 0 low. The upgrade Vulert recommends is 1.2.6, and each entry above names the fixed version to move to.

Which version of djust should I use instead of 0.3.2?

1.2.6 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 0.3.2 the latest release of djust?

No. 0.3.2 was published 18 Feb 2026, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor djust for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the djust version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.