Cross-site scripting in Unicorn framework

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-42053 · ADVISORY
• adamghill/django-unicorn#288 · WEB
• adamghill/django-unicorn commit aa5b983 · WEB
• adamghill/django-unicorn · PACKAGE
• adamghill/django-unicorn · WEB
• GitHub Advisory GHSA-c87f-fq5g-63r2 · ADVISORY
• pypa/advisory-database · WEB
• packetstormsecurity.com/files/164442/django-unicorn-0.35.3-Cross-Site-Scripting.html · WEB
• adamghill/django-unicorn#288 · Patch

django-unicorn のその他の脆弱性

• CVE-2026-31815中 5.3Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in …
• CVE-2025-24370緊急 9.3Django-Unicorn adds modern reactive component functionality to Django templates. Affected versions of Django-Unicorn are vulnerable to pytho…
• CVE-2021-42134中 6.1The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021…