47 matches found
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-31815 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2026-31815 Source advisory: OSV:PYSEC-2026-2451...
django-unicorn affected by component state manipulation via unvalidated attribute access
SummaryComponent state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...
PYSEC-2026-2451 django-unicorn affected by component state manipulation via unvalidated attribute access
Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...
PT-2026-59120
Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended is public protection to modify internal attributes such as template name or trigger protected methods. Vulnerabilit...
PYSEC-2026-329 Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Summary Django-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerability categorized under CWE-915. The vulnerability arises from the core functionality setpropertyvalue, which can be remotely triggered by users by crafting appropriate component requests and feedi...
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
SummaryDjango-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerability categorized under CWE-915. The vulnerability arises from the core functionality setpropertyvalue, which can be remotely triggered by users by crafting appropriate component requests and feedin...
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2025-24370 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2025-24370 Source advisory: OSV:PYSEC-2026-329...
PT-2026-53421
Summary Django-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerability categorized under CWE-915. The vulnerability arises from the core functionality set property value, which can be remotely triggered by users by crafting appropriate component requests and...
CVE-2026-31815
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...
GHSA-FFV6-JJ46-X367 django-unicorn affected by component state manipulation via unvalidated attribute access
Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-31815 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2026-31815 Source advisory: GHSA-FFV6-JJ46-X367...
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-31815 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2026-31815 Source advisory: OSV:GHSA-FFV6-JJ46-X367...
django-unicorn affected by component state manipulation via unvalidated attribute access
Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview django-unicorn is an A magical full-stack framework for Django. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via unvalidated attribute access within the action parsers that fail to enforce visibility...
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-31815 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2026-31815 Source advisory: SNYK:PYTHON-DJANGOUNICORN-15518682...
CVE-2026-31815
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...
CVE-2026-31815 django-unicorn affected by component state manipulation via unvalidated attribute access
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...
CVE-2026-31815 django-unicorn affected by component state manipulation via unvalidated attribute access
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...
tvsd (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-31815 via django-unicorn (0.59.0)
django-unicorn PYPI version 0.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-unicorn and may be impacted: - tvsd =1.4.0, =1.4.1 Source cves: CVE-2026-31815 Source advisory: MEND:CVE-2026-31815...
CVE-2026-31815
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modi...