CVE-2025-48383

Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restricted query sets and restricted data. This issue has been patched in version 8.4.1.

• CWE-402
• CWE-918

• https://github.com/codingjoe/django-select2/commit/e5f41e6edba004d35f94915ff5e2559f44853412
• https://github.com/codingjoe/django-select2/security/advisories/GHSA-wjrh-hj83-3wh7

Published

May 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-48377DNN (formerly DotNetNuke) is an open-source web content mana…5.4
• CVE-2025-48378DNN (formerly DotNetNuke) is an open-source web content mana…5.4
• CVE-2025-48379Pillow is a Python imaging library. In versions 11.2.0 to be…5.5
• CVE-2025-4838A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-48381Computer Vision Annotation Tool (CVAT) is an interactive vid…4.3
• CVE-2025-48382Fess is a deployable Enterprise Search Server. Prior to vers…5.5
• CVE-2025-48384Git is a fast, scalable, distributed revision control system…8
• CVE-2025-48385Git is a fast, scalable, distributed revision control system…8.6
• CVE-2025-48386Git is a fast, scalable, distributed revision control system…6.3
• CVE-2025-48387tar-fs provides filesystem bindings for tar-stream. Versions…8.7
• CVE-2025-48388FreeScout is a free self-hosted help desk and shared mailbox…6.5
• CVE-2025-48389FreeScout is a free self-hosted help desk and shared mailbox…7.2