CVE-2026-61588: djust Django model serialization sensitive data exposure

CVE-2026-61588 · Severity: medium · CVSS 6.5 · Published 2026-09-16

djust is a Django framework that serializes Python model objects to browsers as part of its normal operation. When developers assign Django model instances to public view attributes, djust sends the entire object to the client—including password hashes, privilege flags (like `is_staff`/`is_superuser`), API tokens, and other personally identifiable information—without filtering sensitive fields. This can expose authentication credentials and privileged user data to browser caches, logs, and network monitoring without developers realizing the full object crossed the network.

Technologies: djust (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-61588 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-61588 being exploited in the wild.
How severe is CVE-2026-61588?
Medium severity, with a CVSS score of 6.5, published 16 September 2026.
Which products and versions are affected?
djust (PyPI) < 1.0.7, ECOSYSTEM:introduced=0,fixed=1.0.7.
Is there a fix for CVE-2026-61588?
Yes. djust (PyPI): upgrade to 1.0.7 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-61588 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-61588?
Check whether you run djust (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • djust (PyPI): upgrade to 1.0.7 or later
    pip install "djust>=1.0.7"

Technical details

djust's model serialization mechanism lacks a sensitive-field denylist, causing Django model instances assigned to public view attributes to be serialized in their entirety to the client. The vulnerable component is the serialization logic that converts model objects to JSON/wire format for transmission to browsers. The attack requires a low-privilege authenticated user with network access; there is no user interaction needed. An attacker can capture password hashes, privilege flags (`is_staff`, `is_superuser`), tokens, and PII by inspecting network traffic, browser caches, or stored responses. The root cause is the absence of a secure-by-default filter. Fixed in djust 1.0.7, which applies a sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback mechanism.

Affected products

  • djust-org djust < 1.0.7

Identifiers

  • CVE-2026-61588
  • GHSA-pvg3-6q9j-mj3x
  • PYSEC-2026-4045

Timeline

  • 2026-06-22: disclosed: Vulnerability published by johnrtipton
  • 2026-06-22: patched: Fix released in djust 1.0.7

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.