django-unicorn@0.5.0 vulnerabilities

A magical full-stack framework for Django.

Direct Vulnerabilities

Known vulnerabilities in the django-unicorn package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

django-unicorn is an A magical full-stack framework for Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to incomplete sanitization. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

How to fix Cross-site Scripting (XSS)?

Upgrade django-unicorn to version 0.36.1 or higher.

[,0.36.1)
  • M
Cross-site Scripting (XSS)

django-unicorn is an A magical full-stack framework for Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via component.name.

How to fix Cross-site Scripting (XSS)?

Upgrade django-unicorn to version 0.36.1 or higher.

[,0.36.1)