← All advisories

Medium severity6.1NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026

CVE-2021-42134

CVE-2021-42134

Description

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
django-unicornPyPI	< 0.36.1	0.36.1

Affected products

3

Django Unicorn/Unicorn
cpe:2.3:a:django-unicorn:unicorn:*:*:*:*:*:django:*:*
Range: <0.36.1
Django/Unicorn frameworkdescription
ghsa-coords
pkg:pypi/django-unicorn
Range: < 0.36.1

Patches

Vulnerability mechanics

References

5

github.com/adamghill/django-unicorn/commit/3a832a9e3f6455ddd3b87f646247269918ad10c6nvdPatchThird Party AdvisoryWEB
github.com/adamghill/django-unicorn/compare/0.36.0...0.36.1nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-ggmv-6q9p-9gm6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-42134ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/django-unicorn/PYSEC-2021-369.yamlghsaWEB

News mentions

0

No linked articles in our index yet.