[GHSA] GHSA-xjw9-38cr-6372 (high) — djust: A template binding inherits a context safety grant it never earned (XSS)

GHSA-xjw9-38cr-6372 Severity: high CVE: None

djust: A template binding inherits a context safety grant it never earned (XSS)

A context safety grant was inherited by a template **binding** that never earned it, so rebinding a name the view had marked safe left the mark attached to the new, attacker-controlled value.

djust's context safety channel is keyed by **name**, not by value. Every bind co