EUVD-2021-0059

Malware in sbrugna...

CVE-2021-42053

The Unicorn framework through 0.35.3 for Django allows XSS via component.name...

GHSA-GGMV-6Q9P-9GM6 Cross-site Scripting in django-unicorn

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

Cross-site Scripting in django-unicorn

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

Cross site scripting

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

PYSEC-2021-369

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

CVE-2021-42134

The CVE-2021-42134 entry refers to the Unicorn framework for Django (pre-0.36.1) being vulnerable to cross-site scripting via a component (component or component.name). The issue notes that this XSS stems from an incomplete fix for CVE-2021-42053, indicating the root cause is a fix that did not f...

CVE-2021-42053

The Unicorn framework through 0.35.3 for Django allows XSS via component.name...

CVE-2021-42053

The connected advisories confirm CVE-2021-42053 concerns the Unicorn framework for Django, with XSS via component.name in versions up to 0.35.3. Root cause is an incomplete fix; an updated fix is needed to address this vulnerability. The related entries (GHSA/OSV) indicate that versions before 0....