Skip to content
OpenAdvisories

Package · PyPI

django-unicorn

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-31815

    django-unicorn affected by component state manipulation via unvalidated attribute access

    Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass th…

    django-commons django-unicorn django-unicorn PyPI
  • Medium 6.1
    CVE-2021-42134

    Cross-site Scripting in django-unicorn

    The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

    django-unicorn PyPI
  • Medium 6.1
    CVE-2021-42053 Public exploit

    Cross-site scripting in Unicorn framework

    The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

    django-unicorn PyPI