Unicorn

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-31815 PyPI MEDIUM PATCH This Month

Unicorn adds modern reactive component functionality to your Django templates. versions up to 0.67.0 is affected by improper access control (CVSS 5.3).

Python Authentication Bypass Unicorn

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.0%

CVE-2021-42134 PyPI MEDIUM PATCH This Month

The Unicorn framework before 0.36.1 for Django allows XSS via a component. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

Python XSS Unicorn

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%

CVE-2021-42053 PyPI MEDIUM POC PATCH This Month

The Unicorn framework through 0.35.3 for Django allows XSS via component.name. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Python XSS Unicorn

NVD GitHub Exploit-DB

CVSS 3.1

5.4

EPSS

2.5%

CVE-2026-31815 PyPI

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Unicorn adds modern reactive component functionality to your Django templates. versions up to 0.67.0 is affected by improper access control (CVSS 5.3).

Python Authentication Bypass Unicorn

NVD GitHub VulDB

CVE-2021-42134 PyPI

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Python XSS Unicorn

NVD GitHub

CVE-2021-42053 PyPI

EPSS 3% CVSS 5.4

MEDIUM POC PATCH This Month

Python XSS Unicorn

NVD GitHub Exploit-DB