Skip to content
OpenAdvisories

Package · PyPI

django-unicorn

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2026-31815

    django-unicorn affected by component state manipulation via unvalidated attribute access

    Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass th…

    django-commons django-unicorn django-unicorn PyPI
  • Critical 9.3
    CVE-2025-24370

    Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass

    Django-Unicorn adds modern reactive component functionality to Django templates. Affected versions of Django-Unicorn are vulnerable to python class pollution vulnerability. The vulnerability arises from the core functionality `set_property_value`, which can b…

    adamghill django-unicorn django-unicorn PyPI
  • Medium 6.1
    CVE-2021-42134

    Cross-site Scripting in django-unicorn

    The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

    django-unicorn PyPI
  • Medium 6.1
    CVE-2021-42053 Public exploit

    Cross-site scripting in Unicorn framework

    The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

    django-unicorn PyPI