Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-31815 2 Django-commons, Django-unicorn 2 Django-unicorn, Unicorn 2026-03-18 5.3 Medium
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended _is_public protection to modify internal attributes such as template_name or trigger protected methods. This vulnerability is fixed in 0.67.0.