{"action":"Upgrade django-unicorn to 0.36.0 or later.","affected":[{"fixed":"0.36.0","introduced":"0"}],"component":"django-unicorn","cve_ids":["CVE-2021-42053"],"ecosystem":"PyPI","epss":0.02524,"exploited":false,"fixed_versions":["0.36.0"],"ghsa_id":"GHSA-c87f-fq5g-63r2","id":"tcs_01M5KFCGGPD93BAYPRDQZ08KDJ","modified_at":"2024-09-16T22:09:09.464791Z","published_at":"2021-10-12T17:51:11Z","references":["https://osv.dev/vulnerability/GHSA-c87f-fq5g-63r2","https://nvd.nist.gov/vuln/detail/CVE-2021-42053","https://github.com/adamghill/django-unicorn/pull/288","https://github.com/adamghill/django-unicorn/commit/aa5b9835d946bd9893ef02e556859e3ea62cc5e2","https://github.com/adamghill/django-unicorn","https://github.com/adamghill/django-unicorn/compare/0.35.3...0.36.0","https://github.com/advisories/GHSA-c87f-fq5g-63r2","https://github.com/pypa/advisory-database/tree/main/vulns/django-unicorn/PYSEC-2021-357.yaml","http://packetstormsecurity.com/files/164442/django-unicorn-0.35.3-Cross-Site-Scripting.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c87f-fq5g-63r2","url":"https://osv.dev/vulnerability/GHSA-c87f-fq5g-63r2"}],"summary":"Cross-site scripting in Unicorn framework"}