CVE-2021-42053

5.4

MEDIUMCVSS v3

Published

October 7, 2021

CVSS v2

3.5 LOW

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

w3c/Unicorn

GitHubUnicorn - W3C's Unified Validator

<= 0.35.3NVD

unicorn-engine/unicorn

GitHubUnicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

<= 0.35.3NVD

django-commons/django-unicorn

More on this CVE

NVD↗GitHub Advisory↗

GitHub

The magical reactive component framework for Django ✨

< 0.36.0NVD

unicorn

Python Package IndexUnicorn CPU emulator engine

<= 0.35.3NVD

unicorn

Crates.ioRust bindings for the unicorn emulator

<= 0.35.3NVD

Unicorn

NuGet GalleryUnicorn is a utility for Sitecore that solves the issue of moving templates, renderings, and other database items between Sitecore instances. This package contains both the Unicorn core library and the configuration for it, which is appropriate for web projects. Install Unicorn.Core if you only want the library.

<= 0.35.3NVD

unicorn

NPMAdd some color to your command line.

<= 0.35.3NVD

unicorn

RubyGemsunicorn is an HTTP server for Rack applications designed to only serve fast clients on low-latency, high-bandwidth connections and take advantage of features in Unix/Unix-like kernels. Slow clients should only be served by placing a reverse proxy capable of fully buffering both the the request and response in between unicorn and slow clients.

<= 0.35.3NVD

Security Advisories

CVE-2021-42053

Description

More on this CVE