VULNRABLE / Vulnerability / CVE-2026-61589

CVE-2026-61589

MEDIUM LOW djust GHSA

Exploit verdict: No active-exploit signal

CVSS Score

5.5

Severity

MEDIUM

EPSS

—

Source

GHSA

Summary

djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

What this means

CVE-2026-61589 is a medium-severity vulnerability affecting djust, rated CVSS 5.5. Published September 17, 2026.

View full advisory at GHSA →