django-commons vulnerabilities

Products

• django-unicorn 1

Latest django-commons CVEs

Newest publication first

1. CVE-2026-31815 django-unicorn affected by component state manipulation via unvalidated attribute access

   Published 2026-03-10

   Medium·CVSS 5.3 EPSS 0.25%

   Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended _is_public...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.