These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-113731 vulnerability is an arbitrary absolute-path file read issue in the find_handlers_for_template MCP tool of the djust package. This issue arises when an absolute path to an existing file is provided as the template_path argument, allowing for direct file access without proper confinement to project/template directories. The affected versions of the djust package range from 0.9.0 to 1.3.0 [truncated]
CVE-2026-61588 is a vulnerability in the djust library, which provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django Model instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist, potentially leaking credentials and PII.
CVE-2026-55571 is a high-severity vulnerability in the djust library, which provides Phoenix LiveView-style reactive server-side rendering for Django. The vulnerability allows unauthorized sensitive reads or mutations via WebSocket frames due to LiveViewConsumer.handle_mount sending a navigate frame when authentication or authorization checks fail, but not closing the WebSocket or clearing the view instan [truncated]