{"action":"Upgrade django-select2 to 8.4.1 or later.","affected":[{"fixed":"8.4.1","introduced":"0"}],"component":"django-select2","cve_ids":["CVE-2025-48383"],"ecosystem":"PyPI","epss":0.00325,"exploited":false,"fixed_versions":["8.4.1"],"ghsa_id":"GHSA-wjrh-hj83-3wh7","id":"tcs_01M5KG2CNR82B9DN1RR2K4B3ZZ","modified_at":"2026-09-10T03:50:24.751328727Z","published_at":"2025-05-27T18:03:19Z","references":["https://osv.dev/vulnerability/GHSA-wjrh-hj83-3wh7","https://github.com/codingjoe/django-select2/security/advisories/GHSA-wjrh-hj83-3wh7","https://nvd.nist.gov/vuln/detail/CVE-2025-48383","https://github.com/codingjoe/django-select2/commit/e5f41e6edba004d35f94915ff5e2559f44853412","https://github.com/codingjoe/django-select2"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-wjrh-hj83-3wh7","url":"https://osv.dev/vulnerability/GHSA-wjrh-hj83-3wh7"}],"summary":"Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking"}