Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Neartik

#31319of 53,624
8.2Total CVSS
Vulnerabilities · 1
PT-2025-23006
8.2
2025-05-27
Unknown · Django-Select2 · CVE-2025-48383
**Name of the Vulnerable Software and Affected Versions** Django-Select2 versions prior to 8.4.1 **Description** The issue affects instances of HeavySelect2Mixin subclasses, such as the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing secret access tokens to leak across requests. This can enable users to access restricted query sets and data. **Recommendations** For versions prior to 8.4.1, update to version 8.4.1 to resolve the issue. As a temporary workaround, consider restricting access to instances of HeavySelect2Mixin subclasses until the update is applied.