Approved changes feed: RSS · Atom

cpe:2.3:a:select2:select2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSelect2 (fc695ffe-dc9b-55bb-befb-2e88d4736139)
ProductSelect2 (af4b548b-d930-5f49-8bd9-5d199607745a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ormlondon/select2-forked purl2cpe 2026-06-01 10:11:03.100853
pkg:deb/debian/select2.js purl2cpe 2026-06-01 10:11:03.100856
pkg:deb/ubuntu/select2.js purl2cpe 2026-06-01 10:11:03.100859
pkg:github/select2/select2 purl2cpe 2026-06-01 10:11:03.100861
pkg:maven/org.webjars.npm/select2 purl2cpe 2026-06-01 10:11:03.100864
pkg:npm/select2 purl2cpe 2026-06-01 10:11:03.100867
pkg:nuget/Select2.js purl2cpe 2026-06-01 10:11:03.100870
pkg:sourceforge/select2.mirror purl2cpe 2026-06-01 10:11:03.100872

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10744 vulnerable 2026-06-08 05:07:25.668327 Details available
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.
Published: 2019-03-27T03:54:26.000Z
Updated: 2024-08-06T03:30:20.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.