Vulnerabilidades de Django-commons
CVEs publicadas que afetam produtos de Django-commons: 1 registro(s), com severidade, exploração e correções.
CVE-2026-31815
Média · 5.3
CWE-284 10/03/2026
django-unicorn affected by component state manipulation via unvalidated attribute access
Unicorn adds modern reactive component functionality to your Django templates. Prior to 0.67.0, component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended _is_public protection to modify internal attributes such as template_name or trigger protected methods. This vulnerability is fixed in 0.67.0.