CVE-2021-42134

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053...

CVE-2021-42134

The CVE-2021-42134 entry refers to the Unicorn framework for Django (pre-0.36.1) being vulnerable to cross-site scripting via a component (component or component.name). The issue notes that this XSS stems from an incomplete fix for CVE-2021-42053, indicating the root cause is a fix that did not f...