# CVE-2026-61588: djust Django model serialization sensitive data exposure

Source: https://junglewise.ai/threats/cve-2026-61588-djust-django-model-serialization-sensitive-data-exposure  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-16. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-61588 · Severity: medium · CVSS 6.5 · Published 2026-09-16

djust is a Django framework that serializes Python model objects to browsers as part of its normal operation. When developers assign Django model instances to public view attributes, djust sends the entire object to the client—including password hashes, privilege flags (like `is_staff`/`is_superuser`), API tokens, and other personally identifiable information—without filtering sensitive fields. This can expose authentication credentials and privileged user data to browser caches, logs, and network monitoring without developers realizing the full object crossed the network.

Technologies: [djust (PyPI)](https://junglewise.ai/threats/technologies/djust). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-61588 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-61588 being exploited in the wild.

**How severe is CVE-2026-61588?** Medium severity, with a CVSS score of 6.5, published 16 September 2026.

**Which products and versions are affected?** djust (PyPI) < 1.0.7, ECOSYSTEM:introduced=0,fixed=1.0.7.

**Is there a fix for CVE-2026-61588?** Yes. djust (PyPI): upgrade to 1.0.7 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-61588 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-61588?** Check whether you run djust (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- djust (PyPI): upgrade to 1.0.7 or later

  ```sh
  pip install "djust>=1.0.7"
  ```


## Technical details

djust's model serialization mechanism lacks a sensitive-field denylist, causing Django model instances assigned to public view attributes to be serialized in their entirety to the client. The vulnerable component is the serialization logic that converts model objects to JSON/wire format for transmission to browsers. The attack requires a low-privilege authenticated user with network access; there is no user interaction needed. An attacker can capture password hashes, privilege flags (`is_staff`, `is_superuser`), tokens, and PII by inspecting network traffic, browser caches, or stored responses. The root cause is the absence of a secure-by-default filter. Fixed in djust 1.0.7, which applies a sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback mechanism.

## Affected products

- djust-org djust < 1.0.7

## Identifiers

- CVE-2026-61588
- GHSA-pvg3-6q9j-mj3x
- PYSEC-2026-4045

## Timeline

- 2026-06-22: disclosed: Vulnerability published by johnrtipton
- 2026-06-22: patched: Fix released in djust 1.0.7

## References

- [https://github.com/djust-org/djust/security/advisories/GHSA-pvg3-6q9j-mj3x](https://github.com/djust-org/djust/security/advisories/GHSA-pvg3-6q9j-mj3x)
- [https://github.com/djust-org/djust/releases/tag/v1.0.7](https://github.com/djust-org/djust/releases/tag/v1.0.7)
- [https://api.github.com/repos/djust-org/djust/security-advisories/GHSA-pvg3-6q9j-mj3x](https://api.github.com/repos/djust-org/djust/security-advisories/GHSA-pvg3-6q9j-mj3x)

## Related threats

- [djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.](https://junglewise.ai/threats/cve-2026-113731-djust-provides-phoenix-liveview-style-reactive-server-side)
- [djust template XSS via inherited context safety grant](https://junglewise.ai/threats/djust-template-xss-via-inherited-context-safety-grant-eaaae5cf)
- [djust multiple template-layer cross-site scripting flaws](https://junglewise.ai/threats/djust-six-template-layer-defects-emit-attacker-controlled-markup-54f3f871)
- [djust unauthenticated arbitrary module import in WebSocket/SSE](https://junglewise.ai/threats/cve-2026-61599-djust-unauthenticated-arbitrary-module-import-in-websocket-sse)
- [djust broken object-level access control (IDOR)](https://junglewise.ai/threats/cve-2026-61596-djust-broken-object-level-access-control-idor)