Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•27 views

django-unicorn affected by component state manipulation via unvalidated attribute access

SummaryComponent state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...

5.3CVSS6.1AI score0.00307EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/07/13 2:36 p.m.•16 views

PYSEC-2026-2451 django-unicorn affected by component state manipulation via unvalidated attribute access

Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...

5.3CVSS6.1AI score0.00307EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•16 views

PT-2026-59120

Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended is public protection to modify internal attributes such as template name or trigger protected methods. Vulnerabilit...

5.3CVSS6.1AI score0.00307EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/10 10:16 p.m.•15 views

CVE-2026-31815

Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...

5.3CVSS0.00307EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/03/10 9:07 p.m.•39 views

CVE-2026-31815 django-unicorn affected by component state manipulation via unvalidated attribute access

Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...

5.3CVSS0.00307EPSS
SaveExploits1References1
Fedora
Fedora
•added 2021/08/16 1:18 a.m.•39 views

[SECURITY] Fedora 34 Update: rust-tui-react-0.15.0-2.fc34

TUI widgets using a react-like paradigm, allowing mutable component state and render properties...

9.8CVSS9.9AI score0.01907EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/08/16 12:00 a.m.•37 views

Fedora: Security Advisory for rust-tui-react (FEDORA-2021-3cf88e44b4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.8AI score0.01907EPSS
SaveExploits0References2
Rows per page
Query Builder