A vulnerability in djust caused multi-tenant isolation to fail open on WebSocket and SSE paths, allowing unauthorized cross-tenant data disclosure due to improper tenant context propagation.
djust +1
web-application
mass-assignment
cve-2026-61598
remote-code-execution
information-disclosure
cve-2026-61590
idor
broken-access-control
+5
6t
1c
updated