Django-unicorn

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Django-unicorn records in CISA KEV

No Django-unicorn vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Unicorn · all components

TI-2026-24368 CVE-2026-31815 · GHSA-ffv6-jj46-x367

MEDIUM 63

Unicorn adds modern reactive component functionality to your Django templates.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00252 Published 2026-03-10 Fixed in 0.67.0 CWE-284

TI-2021-18564 CVE-2021-42053 · GHSA-c87f-fq5g-63r2

LOW 29

The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02524 Published 2021-10-07 Fixed in 0.36.0 CWE-79

TI-2021-18642 CVE-2021-42134 · GHSA-ggmv-6q9p-9gm6

LOW 28

The Unicorn framework before 0.36.1 for Django allows XSS via a component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2021-10-11 Fixed in 0.36.1 CWE-79