PyPI/django-unicorn CVE-2021-42053: medium 6.1, EPSS 2.52%

Cross-site scripting in Unicorn framework

Action: Upgrade django-unicorn to 0.36.0 or later.

pip install django-unicorn==0.36.0

Affected

Fixed versions

Sources

• osv: GHSA-c87f-fq5g-63r2
• https://nvd.nist.gov/vuln/detail/CVE-2021-42053
• https://github.com/adamghill/django-unicorn/pull/288
• https://github.com/adamghill/django-unicorn/commit/aa5b9835d946bd9893ef02e556859e3ea62cc5e2
• https://github.com/adamghill/django-unicorn
• https://github.com/adamghill/django-unicorn/compare/0.35.3...0.36.0
• https://github.com/advisories/GHSA-c87f-fq5g-63r2
• https://github.com/pypa/advisory-database/tree/main/vulns/django-unicorn/PYSEC-2021-357.yaml
• http://packetstormsecurity.com/files/164442/django-unicorn-0.35.3-Cross-Site-Scripting.html

CVE-2021-42053 · published 2021-10-12T17:51:11Z · modified 2024-09-16T22:09:09.464791Z · JSON