Unknown · Django-Select2 · CVE-2025-48383
**Name of the Vulnerable Software and Affected Versions**
Django-Select2 versions prior to 8.4.1
**Description**
The issue affects instances of HeavySelect2Mixin subclasses, such as the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing secret access tokens to leak across requests. This can enable users to access restricted query sets and data.
**Recommendations**
For versions prior to 8.4.1, update to version 8.4.1 to resolve the issue. As a temporary workaround, consider restricting access to instances of HeavySelect2Mixin subclasses until the update is applied.