Products: 1
Vulnerabilities: 14
Known Exploited: 0
1
Critical Level Threats
7
High Level Threats
2
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-113731
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
Last Modified: Oct 28, 2026
Published: Oct 20, 2026
CVE-2026-61599
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
Last Modified: Sep 17, 2026
Published: Sep 16, 2026
CVE-2026-61589
djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path
Last Modified: Sep 18, 2026
Published: Sep 16, 2026
CVE-2026-61596
djust has broken object-level access control (IDOR)
Last Modified: Sep 17, 2026
Published: Sep 16, 2026
CVE-2026-61588
djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
Last Modified: Sep 19, 2026
Published: Sep 16, 2026
Items Per Page
