Unicorn

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-31815 Mar 10, 22:16 PyPI MEDIUM PATCH This Month

Unicorn adds modern reactive component functionality to your Django templates. versions up to 0.67.0 is affected by improper access control (CVSS 5.3).

Authentication Bypass Python Unicorn Django Unicorn

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.0%

CVE-2021-42134 Oct 11, 01:15 PyPI MEDIUM PATCH This Month

The Unicorn framework before 0.36.1 for Django allows XSS via a component. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Python Unicorn Django Unicorn

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%

CVE-2021-42053 Oct 07, 06:15 PyPI MEDIUM POC PATCH This Month

The Unicorn framework through 0.35.3 for Django allows XSS via component.name. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Python Unicorn Django Unicorn

NVD GitHub Exploit-DB

CVSS 3.1

5.4

EPSS

2.5%

CVE-2026-31815 PyPI

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Unicorn adds modern reactive component functionality to your Django templates. versions up to 0.67.0 is affected by improper access control (CVSS 5.3).

Authentication Bypass Python Unicorn +1

NVD GitHub VulDB

CVE-2021-42134 PyPI

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Python Unicorn +1

NVD GitHub

CVE-2021-42053 PyPI

EPSS 3% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Python Unicorn +1

NVD GitHub Exploit-DB