debian/django-select2 vulnerabilities

Latest debian/django-select2 CVEs

Newest publication first

1. CVE-2025-48383 Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

   Published 2025-05-27

   High·CVSS 8.2 EPSS 0.33%

   Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restricted query sets and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.