Vulnerabilities

TI-2026-24368 CVE-2026-31815 · GHSA-ffv6-jj46-x367

django-unicorn affected by component state manipulation via unvalidated attribute access

MEDIUM 63

Unicorn adds modern reactive component functionality to your Django templates.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00252 Published 2026-03-10 Fixed in 0.67.0 CWE-284

TI-2021-18642 CVE-2021-42134 · GHSA-ggmv-6q9p-9gm6

LOW 28

The Unicorn framework before 0.36.1 for Django allows XSS via a component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2021-10-11 Fixed in 0.36.1 CWE-79

TI-2021-18564 CVE-2021-42053 · GHSA-c87f-fq5g-63r2

LOW 29

The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02524 Published 2021-10-07 Fixed in 0.36.0 CWE-79