https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 03:41:49 +0000 https://vulnerability.circl.lu/sighting/28964bfe-b6e2-4488-9cf9-2b745a7b74b6/export {"uuid": "28964bfe-b6e2-4488-9cf9-2b745a7b74b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61591", "type": "seen", "source": "https://gist.github.com/alon710/0d63b7210fa6cfac077576ae0d0c2a4f", "content": "# CVE-2026-61591: CVE-2026-61591: State Snapshot Injection and Mass Assignment in djust Framework\n\n> **CVSS Score:** 8.1\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61591\n\n## Summary\nCVE-2026-61591 is a high-severity state injection and authorization bypass vulnerability affecting the djust framework's opt-in State Snapshot feature. Prior to version 1.0.7, the framework restored public view state snapshots returned from the client browser during back-navigation without validating their cryptographic authenticity or integrity. This flaw allows malicious clients to manipulate serialized JSON payloads to inject unauthorized properties, leading to mass assignment (CWE-915) and privilege escalation. Version 1.0.7 addresses this issue by introducing HMAC cryptographic signatures bound to both the view configuration and the user's session identifier.\n\n## TL;DR\nUnsigned client-side state snapshots in the djust framework allow remote authenticated attackers to execute arbitrary state injection and mass assignment via tampered WebSocket frames, leading to full privilege escalation. This has been resolved in version 1.0.7 through cryptographic HMAC signatures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345, CWE-915\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.1 (High)\n- **Exploit Status**: Proof-of-Concept / Conceptual\n- **KEV Status**: Not Listed\n- **Affected Component**: State Snapshot Feature (live_redirect_mount)\n\n## Affected Systems\n\n- djust framework library\n- **djust**: < 1.0.7 (Fixed in: `1.0.7`)\n\n## Mitigation\n\n- Upgrade the djust framework library to version 1.0.7 or higher to implement cryptographic HMAC signatures on all state snapshots.\n- Disable the state snapshot feature globally or on individual views if upgrade cycles cannot be executed immediately.\n- Remove privilege and authorization state variables from the public scope of LiveView classes to prevent state manipulation.\n\n**Remediation Steps:**\n1. Step 1: Inspect the current djust package version in the project requirements.\n2. Step 2: Execute pip install --upgrade djust>=1.0.7 to pull the security update.\n3. Step 3: Update local configuration files and ensure DJUST_STATE_SNAPSHOT_MAX_AGE is defined if custom TTL is required.\n4. Step 4: Re-verify application flows and confirm state restoration works securely with cryptographic signatures.\n\n## References\n\n- [GHSA-c67v-vqrp-m5wj: Cryptographic state-snapshot signature bypass in djust](https://github.com/djust-org/djust/security/advisories/GHSA-c67v-vqrp-m5wj)\n- [djust v1.0.7 Release Details and Changelog](https://github.com/djust-org/djust/releases/tag/v1.0.7)\n- [Patched Source Code Implementation for Secure Snapshot Serialization](https://raw.githubusercontent.com/djust-org/djust/v1.0.7/python/djust/security/state_snapshot.py)\n- [Official Regression Test Coverage verifying cryptographic verification](https://raw.githubusercontent.com/djust-org/djust/v1.0.7/python/djust/tests/test_state_snapshot_signing.py)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61591) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T11:31:44.737869Z"} {"uuid": "28964bfe-b6e2-4488-9cf9-2b745a7b74b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61591", "type": "seen", "source": "https://gist.github.com/alon710/0d63b7210fa6cfac077576ae0d0c2a4f", "content": "# CVE-2026-61591: CVE-2026-61591: State Snapshot Injection and Mass Assignment in djust Framework\n\n> **CVSS Score:** 8.1\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61591\n\n## Summary\nCVE-2026-61591 is a high-severity state injection and authorization bypass vulnerability affecting the djust framework's opt-in State Snapshot feature. Prior to version 1.0.7, the framework restored public view state snapshots returned from the client browser during back-navigation without validating their cryptographic authenticity or integrity. This flaw allows malicious clients to manipulate serialized JSON payloads to inject unauthorized properties, leading to mass assignment (CWE-915) and privilege escalation. Version 1.0.7 addresses this issue by introducing HMAC cryptographic signatures bound to both the view configuration and the user's session identifier.\n\n## TL;DR\nUnsigned client-side state snapshots in the djust framework allow remote authenticated attackers to execute arbitrary state injection and mass assignment via tampered WebSocket frames, leading to full privilege escalation. This has been resolved in version 1.0.7 through cryptographic HMAC signatures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345, CWE-915\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.1 (High)\n- **Exploit Status**: Proof-of-Concept / Conceptual\n- **KEV Status**: Not Listed\n- **Affected Component**: State Snapshot Feature (live_redirect_mount)\n\n## Affected Systems\n\n- djust framework library\n- **djust**: < 1.0.7 (Fixed in: `1.0.7`)\n\n## Mitigation\n\n- Upgrade the djust framework library to version 1.0.7 or higher to implement cryptographic HMAC signatures on all state snapshots.\n- Disable the state snapshot feature globally or on individual views if upgrade cycles cannot be executed immediately.\n- Remove privilege and authorization state variables from the public scope of LiveView classes to prevent state manipulation.\n\n**Remediation Steps:**\n1. Step 1: Inspect the current djust package version in the project requirements.\n2. Step 2: Execute pip install --upgrade djust>=1.0.7 to pull the security update.\n3. Step 3: Update local configuration files and ensure DJUST_STATE_SNAPSHOT_MAX_AGE is defined if custom TTL is required.\n4. Step 4: Re-verify application flows and confirm state restoration works securely with cryptographic signatures.\n\n## References\n\n- [GHSA-c67v-vqrp-m5wj: Cryptographic state-snapshot signature bypass in djust](https://github.com/djust-org/djust/security/advisories/GHSA-c67v-vqrp-m5wj)\n- [djust v1.0.7 Release Details and Changelog](https://github.com/djust-org/djust/releases/tag/v1.0.7)\n- [Patched Source Code Implementation for Secure Snapshot Serialization](https://raw.githubusercontent.com/djust-org/djust/v1.0.7/python/djust/security/state_snapshot.py)\n- [Official Regression Test Coverage verifying cryptographic verification](https://raw.githubusercontent.com/djust-org/djust/v1.0.7/python/djust/tests/test_state_snapshot_signing.py)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61591) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T11:31:44.737869Z"} https://vulnerability.circl.lu/sighting/28964bfe-b6e2-4488-9cf9-2b745a7b74b6/export Thu, 17 Sep 2026 11:31:44 +0000