THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-61588 (MEDIUM 6.5) — djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sendi

[NVD] CVE-2026-61588 (MEDIUM 6.5) — djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sendi

mednvdPublished 2026-09-16

CVE-2026-61588 CVSS: 6.5 MEDIUM Published: 2026-09-16T23:16:52.630

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege f

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-61588cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-61588