django-unicorn vulnerabilities
CVEs whose affected-version data names the django-unicorn package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-31815Medium· 5.3django-unicorn affected by component state manipulation via unvalidated attribute access
django-unicorn affected by component state manipulation via unvalidated attribute access
▾ Sunlitdjango-unicorn · django-unicornEPSS 0.22%via OSV
CVE-2025-24370CriticalDjango-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
▾ Midnightdjango-unicorn · django-unicornEPSS 0.49%via OSV