PyPI/djust CVE-2026-61599: high, EPSS 0.60%

djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path

Action: Upgrade djust to 1.0.7 or later.

pip install djust==1.0.7

Affected

Fixed versions

Sources

• osv: GHSA-7prp-2623-8g45
• https://github.com/djust-org/djust/security/advisories/GHSA-7prp-2623-8g45
• https://github.com/djust-org/djust
• https://github.com/djust-org/djust/releases/tag/v1.0.7

CVE-2026-61599 · published 2026-09-16T22:09:38Z · modified 2026-10-01T17:55:40.963305125Z · JSON