Vulnerability · Published Sep 16, 2026 · Assigned by GitHub_M
CVE-2026-61588djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
Medium 6.5
In plain English
A medium-severity information exposure in djust from djust-org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | djust | 1.0.7 | GHSA-pvg3-6q9j-mj3x |
| PyPI | djust | 1.0.7 | PYSEC-2026-4045 |
Affected products (as reported)
Weakness: CWE-200, CWE-359 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://github.com/djust-org/djust/security/advisories/GHSA-pvg3-6q9j-mj3x x_refsource_CONFIRM
- https://github.com/djust-org/djust/releases/tag/v1.0.7 x_refsource_MISC