{"action":"Upgrade djust to 1.1.2 or later.","affected":[{"fixed":"1.1.2","introduced":"0"}],"component":"djust","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.1.2"],"ghsa_id":"GHSA-xjw9-38cr-6372","id":"tcs_01M5KG4BVJ383FPCA5TFEBA6X1","modified_at":"2026-09-17T20:45:07.392729041Z","published_at":"2026-09-17T20:31:48Z","references":["https://osv.dev/vulnerability/GHSA-xjw9-38cr-6372","https://github.com/djust-org/djust/security/advisories/GHSA-xjw9-38cr-6372","https://github.com/djust-org/djust","https://github.com/djust-org/djust/releases/tag/v1.1.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-xjw9-38cr-6372","url":"https://osv.dev/vulnerability/GHSA-xjw9-38cr-6372"}],"summary":"djust: A template binding inherits a context safety grant it never earned (XSS)"}