Django Select2
Approved changes feed: RSS · Atom
cpe:2.3:a:codingjoe:django-select2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codingjoe (789b8809-fc3f-5d69-97d2-cd9210a6f2dc) |
|---|---|
| Product | Django Select2 (632ab39f-cd72-5d0c-993b-ad14afac6fed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48383 |
vulnerable | 2026-06-08 07:27:15.770143 |
Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking
HIGH (8.2)
Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restricted query sets and restricted data. This issue has been patched in version 8.4.1.
Published: 2025-05-27T15:03:10.062Z
Updated: 2025-05-27T15:17:02.957Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.