Cross site scripting

The Unicorn framework through 0.35.3 for Django allows XSS via component.name...

CVE-2021-42053

The Unicorn framework through 0.35.3 for Django allows XSS via component.name...

CVE-2021-42053

The connected advisories confirm CVE-2021-42053 concerns the Unicorn framework for Django, with XSS via component.name in versions up to 0.35.3. Root cause is an incomplete fix; an updated fix is needed to address this vulnerability. The related entries (GHSA/OSV) indicate that versions before 0....