Skip to content
OpenAdvisories

Vendor

django-commons

1 known vulnerabilities.

Products

django-unicorn 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-31815

    django-unicorn affected by component state manipulation via unvalidated attribute access

    Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass th…

    django-commons django-unicorn django-unicorn PyPI