{"action":"Upgrade django-select2 to 8.4.1 or later.","affected":[{"fixed":"8.4.1","introduced":"0"}],"component":"django-select2","cve_ids":["CVE-2025-48383"],"ecosystem":"PyPI","epss":0.00325,"exploited":false,"fixed_versions":["8.4.1"],"ghsa_id":"GHSA-wjrh-hj83-3wh7","id":"tcs_01M5KGRRZADJQQ6K5WR5VHH82W","modified_at":"2026-07-07T17:46:34.969610478Z","published_at":"2026-07-07T16:02:53.098211Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1300","https://github.com/codingjoe/django-select2/security/advisories/GHSA-wjrh-hj83-3wh7","https://nvd.nist.gov/vuln/detail/CVE-2025-48383","https://github.com/codingjoe/django-select2/commit/e5f41e6edba004d35f94915ff5e2559f44853412","https://github.com/codingjoe/django-select2","https://pypi.org/project/django-select2","https://github.com/advisories/GHSA-wjrh-hj83-3wh7"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-1300","url":"https://osv.dev/vulnerability/PYSEC-2026-1300"}],"summary":"Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking"}