diff --git a/security.py b/security.py
index 83e4ab7..9e116e8 100644
--- a/security.py
+++ b/security.py
@@ -134,7 +134,7 @@ async def get_current_active_user(
 ):
     if current_user.disabled:
         raise HTTPException(status_code=400, detail="Inactive user")
-    return current_user
+    return current_user.model_dump(exclude={"hashed_password", "disabled"})
 
 
 async def login_for_access_token(