Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Neartik

#33189of 56,328
8.2Total CVSS
Vulnerabilities · 1
PT-2025-23006
8.2
2025-05-27
Unknown · Django-Select2 · CVE-2025-48383
**Name of the Vulnerable Software and Affected Versions** Django-Select2 versions prior to 8.4.1 **Description** The issue affects instances of HeavySelect2Mixin subclasses, such as the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing secret access tokens to leak across requests. This can enable users to access restricted query sets and data. **Recommendations** For versions prior to 8.4.1, update to version 8.4.1 to resolve the issue. As a temporary workaround, consider restricting access to instances of HeavySelect2Mixin subclasses until the update is applied.