CVE-2021-42134

6.1

MEDIUMCVSS v3

Published

October 11, 2021

CVSS v2

4.3 MEDIUM

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

w3c/Unicorn

GitHubUnicorn - W3C's Unified Validator

< 0.36.1NVD

unicorn-engine/unicorn

GitHubUnicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

< 0.36.1NVD

django-commons/django-unicorn

More on this CVE

NVD↗GitHub Advisory↗

GitHub

The magical reactive component framework for Django ✨

< 0.36.1NVD

unicorn

Python Package IndexUnicorn CPU emulator engine

< 0.36.1NVD

unicorn

Crates.ioRust bindings for the unicorn emulator

< 0.36.1NVD

Unicorn

NuGet GalleryUnicorn is a utility for Sitecore that solves the issue of moving templates, renderings, and other database items between Sitecore instances. This package contains both the Unicorn core library and the configuration for it, which is appropriate for web projects. Install Unicorn.Core if you only want the library.

< 0.36.1NVD

unicorn

NPMAdd some color to your command line.

< 0.36.1NVD

unicorn

RubyGemsunicorn is an HTTP server for Rack applications designed to only serve fast clients on low-latency, high-bandwidth connections and take advantage of features in Unix/Unix-like kernels. Slow clients should only be served by placing a reverse proxy capable of fully buffering both the the request and response in between unicorn and slow clients.

< 0.36.1NVD

Security Advisories

CVE-2021-42134

Description

More on this CVE