What’s Vulnerable › Vulnerabilities

CVE-2021-42134

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-11 · updated 2026-06-17
• Weakness: CWE-79

Description

The Unicorn framework before 0.36.1 for Django allows XSS via a component. NOTE: this issue exists because of an incomplete fix for CVE-2021-42053.

Affected products

• django-commons django-unicorn: before 0.36.1 — fixed in 0.36.1

How to fix

Upgrade to a fixed version: django-commons django-unicorn 0.36.1. Check the vendor advisory for mitigations.

References

• https://github.com/adamghill/django-unicorn/commit/3a832a9e3f6455ddd3b87f646247269918ad10c6
• https://github.com/adamghill/django-unicorn/compare/0.36.0...0.36.1
• https://github.com/adamghill/django-unicorn/commit/3a832a9e3f6455ddd3b87f646247269918ad10c6
• https://github.com/adamghill/django-unicorn/compare/0.36.0...0.36.1

Get alerted when CVE-2021-42134 or the next vulnerability affects your stack