PyPI/django-tomselect: low
Django TomSelect incomplete escaping of dangerous characters in widget attributes
Action: Upgrade django-tomselect to 2025.3.3 or later.
pip install django-tomselect==2025.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.3.3 | - |
Fixed versions
| 2025.3.3 |
Sources
- osv: GHSA-785h-76cm-cpmf
- https://github.com/OmenApps/django-tomselect/security/advisories/GHSA-785h-76cm-cpmf
- https://github.com/OmenApps/django-tomselect/commit/0990ed36c8874f9d42fa9deff7734bf8dcd46d40
- https://github.com/OmenApps/django-tomselect
published · modified · JSON