What is the official website of Capacity Building Center for States ?

The official website of Capacity Building Center for States is https://capacity.childwelfare.gov/states/.

What is Capacity Building Center for States's cybersecurity risk score?

Capacity Building Center for States has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Capacity Building Center for States experienced?

According to Rankiteo, Capacity Building Center for States currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Capacity Building Center for States been affected by any supply chain cyber incidents ?

According to Rankiteo, Capacity Building Center for States has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Capacity Building Center for States have SOC 2 Type 1 certification ?

According to Rankiteo, Capacity Building Center for States is not certified under SOC 2 Type 1.

Does Capacity Building Center for States have SOC 2 Type 2 certification ?

According to Rankiteo, Capacity Building Center for States does not hold a SOC 2 Type 2 certification.

Does Capacity Building Center for States comply with GDPR ?

According to Rankiteo, Capacity Building Center for States is not listed as GDPR compliant.

Does Capacity Building Center for States have PCI DSS certification ?

According to Rankiteo, Capacity Building Center for States does not currently maintain PCI DSS compliance.

Does Capacity Building Center for States comply with HIPAA ?

According to Rankiteo, Capacity Building Center for States is not compliant with HIPAA regulations.

Does Capacity Building Center for States have ISO 27001 certification ?

According to Rankiteo,Capacity Building Center for States is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Capacity Building Center for States operate in ?

Capacity Building Center for States operates primarily in the Government Administration industry.

How many employees does Capacity Building Center for States have ?

Capacity Building Center for States employs approximately None employees people worldwide.

Does Capacity Building Center for States own any subsidiaries ?

Capacity Building Center for States presently has no subsidiaries across any sectors.

How many LinkedIn followers does Capacity Building Center for States have ?

Capacity Building Center for States's official LinkedIn profile has approximately 2,687 followers.

What is the NAICS classification code for Capacity Building Center for States ?

Capacity Building Center for States is classified under the NAICS code 92, which corresponds to Public Administration.

Does Capacity Building Center for States have a Crunchbase profile ?

No, Capacity Building Center for States does not have a profile on Crunchbase.

Does Capacity Building Center for States have a LinkedIn profile ?

Yes, Capacity Building Center for States maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/capacity-building-center-for-states.

How many cybersecurity incidents has Capacity Building Center for States experienced ?

As of September 17, 2026, Rankiteo reports that Capacity Building Center for States has experienced 9 cybersecurity incidents.

How many peer or competitor companies does Capacity Building Center for States have ?

Capacity Building Center for States has an estimated 13,456 peer or competitor companies worldwide.

What types of cybersecurity incidents has Capacity Building Center for States faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak, Cyber Attack, Ransomware and Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CBCS

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Capacity Building Center for States Vendor Cyber Rating & Cyber Score

childwelfare.gov

Add Your Compliance Badge

The Capacity Building Center for States (the Center) partners with State and territorial public child welfare agencies to achieve better outcomes for children, youth, and families. Join our email community to stay in touch and in the know about what’s happening at the Center. http://bit.ly/cbcsupdates

CBCS

Capacity Building Center for States CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Department of ...

Cyber Attack

100

8/2026

HHSUSD178779097...

U.S. Department of ...

Breach

2/2026

HHS1771281140

Capacity Building C...

Ransomware

100

6/2025

HHS821061925

U.S. Department of ...

Breach

1/2025

BAKHHS177457831...

U.S. Department of ...

Breach

1/2025

HHS1772059552

Capacity Building C...

Breach

100

12/2023

HHS002070924

U.S. Department of ...

Data Leak

07/2023

USD24024723

U.S. Department of ...

Data Leak

4/2020

USD142925623

Capacity Building C...

Data Leak

03/2019

USD54141223

Loading…

A.I.

CBCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CBCS

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Capacity Building Center for States in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Capacity Building Center for States in 2026.

Incident Types CBCS vs Government Administration Industry Avg (This Year)

No incidents recorded for Capacity Building Center for States in 2026.

Incident History - CBCS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Capacity Building Center for States Subsidiaries

CBCS

Government Administration

Website: https://capacity.childwelfare.gov/states/

Company Size: 51-200 employees

U.S. Department of Health and Human Services (HHS)Government Administration

Office of Infectious Disease and HIV/AIDS PolicyGovernment Administration

HHS Office of Inspector GeneralGovernment Administration

HHS CareersGovernment Administration

HHS Office of the SecretaryGovernment Administration

HHS Access2SuccessGovernment Relations

Medical Reserve CorpsGovernment Administration

HHS Office of Small and Disadvantaged Business Utilization (HHS OSDBU)Government Relations Services

Secretary KennedyGovernment Administration

Administration for Children and Families (ACF)Government Administration

Office on Trafficking in PersonsGovernment Administration

Child Welfare Information GatewayHealth and Human Services

Health Profession Opportunity Grants (HPOG)Government Administration

Loading…

Capacity Building Center for States Similar Companies

UWV

uwv.nl

Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en efficiënte wijze uitvoering aan werknemersverzekeringen, zoals de WW, WIA, WAO, WAZ, Wajong, Wazo en Ziektewet. Bij UWV werken ruim 22.000 mensen, die allen bijdragen aan een samenleving waarin iedereen mee kan doen. Onze medewerkers zijn er voor werkzoekenden, werkenden, mensen met een afstand tot de arbeidsmarkt, stakeholders én werkgevers. Als je bij UWV werkt, weet je waar je het voor doet: mensen verder helpen met werk en inkomen. Werken bij UWV is tastbaar, je werkt aan echte vraagstukken van mensen, ieder met eigen uitdagingen, ambities en drijfveren. Zo leveren medewerkers van UWV allemaal een bijdrage aan een samenleving waarin iedereen mee kan doen. Want bij UWV werk je niet alleen voor jezelf. Je werkt voor ons allemaal.

Centers for Disease Control and Prevention

cdc.gov

CDC works 24/7 keeping America safe from health, safety and security threats, both foreign and domestic. Whether diseases start at home or abroad, are chronic or acute, curable or preventable, human error or deliberate attack, CDC fights it and supports communities and citizens to prevent it. CDC is the nation’s health protection agency - saving lives, protecting people from health threats, and saving money through prevention. For more information, please go to: http://www.cdc.gov/ Comment Policy: Please visit http://www.cdc.gov/SocialMedia/Tools/CommentPolicy.html to view CDC’s social media comment policy. Privacy Notice Regarding Third Party Websites: Privacy Notice: The Centers for Disease Control and Prevention uses third-party Web sites to share information and to encourage collaboration with the public. Third-party Web sites are not Government-owned or Government-operated. They are controlled and operated by a third party not affiliated with CDC. The CDC Privacy Policy does not apply to third-party Web sites or applications. To learn more about CDC’s privacy practices, please visit our Privacy Policy at https://www.cdc.gov/other/privacy.html.

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

UK Home Office

www.gov.uk

At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe from the threat of terrorism - reducing and preventing crime, and ensuring people feel safe in their homes and communities - securing the UK border and controlling immigration - considering applications to enter and stay in the UK - issuing passports and visas - supporting visible, responsible and accountable policing by empowering the public and freeing up the police to fight crime - fire prevention and rescue These organisations are all part of the Home Office: - Border Force - HM Passport Office (HMPO) - Immigration Enforcement - UK Visas and Immigration (UKVI)

Ministère de l'Éducation nationale

gouv.fr

Page officielle du ministère de l'Éducation nationale. Retrouvez toute l'information sur www.education.gouv.fr, twitter.com/education_gouv, facebook.com/education.gouv et dans nos lettres d'informations (bulletin hebdo et lettre education.gouv.fr). ------------------------------------------------------------- Le ministère de l'Éducation nationale est en charge de la préparation et de la mise en œuvre de la politique du Gouvernement concernant la jeunesse, au sein et en dehors du milieu scolaire, et l'accès de chacun aux savoirs et au développement de l'enseignement pré-élémentaire, élémentaire et secondaire. Ses compétences principales s’exercent dans : la définition des voies de formation, la fixation des programmes nationaux, l'organisation et le contenu des enseignements ; la définition et la délivrance des diplômes nationaux et la collation des grades et titres universitaires ; / le recrutement et la gestion des personnels qui dépendent de sa responsabilité ; / la répartition des moyens qu'il consacre à l'éducation, afin d'assurer en particulier l'égalité d'accès au service public ; le contrôle et l'évaluation des politiques éducatives, en vue d'assurer la cohérence d'ensemble du système éducatif. L'administration de l'Éducation nationale est présente dans chaque région et dans chaque département : ce sont les services déconcentrés du ministère de l'Éducation nationale. Son organisation s’articule autour de 17 régions académiques, 30 académies et 97 directions des services départementaux de l'Éducation nationale. Les domaines où s'exercent les métiers dans l'éducation nationale sont multiples : l'enseignement avec plus de 80% des effectifs, l'éducation et l'orientation mais aussi la santé et le social, l'administration, la comptabilité, la gestion et les finances, la technique, les systèmes d’information, la recherche et formation, les bibliothèques, l'encadrement (direction et inspection).

Ministero dell'Interno

interno.gov.it

Il ministero dell'Interno è una struttura complessa il cui assetto organizzativo è disciplinato dal D.L.vo n. 300/99 e dai provvedimenti attuativi. A livello centrale, si articola in uffici di diretta collaborazione con il ministro (D.P.R. n. 98/2002) e cinque dipartimenti (D.P.R. n. 398/2001 e successive modificazioni); a livello periferico, in Prefetture-Uffici Territoriali di Governo, Questure e Comandi dei Vigili del fuoco.

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

Texas Health and Human Services

texas.gov

Texas Health and Human Services, also known as the Texas Health and Human Services Commission (HHSC), helps more than 7.5 million Texans every month. The agency supports the needs of mothers, children and families through programs such as Medicaid, CHIP, SNAP, women’s health and behavioral health services. HHSC provides long-term services and supports for seniors and people with disabilities, and operates state supported living centers for residents with intellectual and developmental disabilities and state psychiatric hospitals. HHSC also regulates health care providers, professions and facilities to protect the health and safety of Texans.

Loading…

NEWS

Capacity Building Center for States CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 27, 2025 11:55 AM

Cybersecurity and New Technologies | Office of Counter-Terrorism

At the Cyber challenge, 15 teams of young innovators presented solutions & received guidance from experts to develop creative ideas, ranging from P/CVE to...

Read Article

November 27, 2025 10:49 AM

Cybersecurity and New Technologies | Office of Counter-Terrorism

Misuse of information and communications technologiesThere is growing concern over the misuse of information and communications technologies (ICT) by...

Read Article

November 27, 2025 09:01 AM

Office of Counter-Terrorism

Terrorists, as well as those they inspire, represent a major transnational threat. Detecting and disrupting the travel of these individuals and groups,...

Read Article

November 17, 2025 08:00 AM

IP25108 | Southeast Asia’s Cybersecurity Trajectory Beyond the UN OEWG

KEY TAKEAWAYS • Southeast Asia has made considerable progress across the four pillars of the UN framework on responsible state behaviour in...

Read Article

November 05, 2025 06:25 AM

Positioning Japan in Cybersecurity Trajectories

On Oct. 24, the Jackson School's Program on Strategy, Policy and Diplomacy Research (SPDR) hosted the public panel, “Positioning Japan in...

Read Article

September 25, 2025 07:00 AM

Assessing Cyber Risks and Resilience in India and Pakistan

Taking stock of the threats, opportunities, and mitigation measures in India and Pakistan's civilian cyber and digital ecosystems.

Read Article

July 29, 2025 07:00 AM

Two (or Too Many) Cheers for UN Cyber Diplomacy?

The reaction to the conclusion of the final UN Open-Ended Working Group on responsible state behavior in cyberspace is out of proportion to...

Read Article

July 25, 2025 07:00 AM

Hidden Enablers: Third Countries in North Korea’s Cyber Playbook

North Korea has strategically leveraged its connections with third countries such as China, Russia, and Southeast Asian nations to build a...

Read Article

June 25, 2025 07:00 AM

Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace

If the United States wishes to compete in cyberspace, it must compete against China to secure its offensive cyber supply chain.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-65388

SUMMARY

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg

CVE-2026-61599

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-61596

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-61589

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

CVE-2026-61588

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Capacity Building Center for States Vendor Cyber Rating & Cyber Score

CBCS A.I CyberSecurity Scoring

Capacity Building Center for States CyberSecurity News & History

CBCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CBCS

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CBCS vs Government Administration Industry Avg (This Year)

Incident History - CBCS (X = Date, Y = Severity)

Capacity Building Center for States Subsidiaries

CBCS

Capacity Building Center for States Similar Companies

UWV

Centers for Disease Control and Prevention

ISSSTE

UK Home Office

Ministère de l'Éducation nationale

Ministero dell'Interno

Assurance Maladie

Comunidad de Madrid

Texas Health and Human Services

Capacity Building Center for States CyberSecurity News

Cybersecurity and New Technologies | Office of Counter-Terrorism

Cybersecurity and New Technologies | Office of Counter-Terrorism

Office of Counter-Terrorism

IP25108 | Southeast Asia’s Cybersecurity Trajectory Beyond the UN OEWG

Positioning Japan in Cybersecurity Trajectories

Assessing Cyber Risks and Resilience in India and Pakistan

Two (or Too Many) Cheers for UN Cyber Diplomacy?

Hidden Enablers: Third Countries in North Korea’s Cyber Playbook

Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Capacity Building Center for States CyberSecurity News & History

CBCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CBCS

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CBCS vs Government Administration Industry Avg (This Year)

Incident History - CBCS (X = Date, Y = Severity)

Capacity Building Center for States Subsidiaries

CBCS

Capacity Building Center for States Similar Companies

UWV

Centers for Disease Control and Prevention

ISSSTE

UK Home Office

Ministère de l'Éducation nationale

Ministero dell'Interno

Assurance Maladie

Comunidad de Madrid

Texas Health and Human Services

Capacity Building Center for States CyberSecurity News

Cybersecurity and New Technologies | Office of Counter-Terrorism

Cybersecurity and New Technologies | Office of Counter-Terrorism

Office of Counter-Terrorism

IP25108 | Southeast Asia’s Cybersecurity Trajectory Beyond the UN OEWG

Positioning Japan in Cybersecurity Trajectories

Assessing Cyber Risks and Resilience in India and Pakistan

Two (or Too Many) Cheers for UN Cyber Diplomacy?

Hidden Enablers: Third Countries in North Korea’s Cyber Playbook

Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo