Django-Unicorn versions prior to 0.62.0 contain a python class pollution vulnerability (CWE-915) in the set_property_value function. This flaw allows remote attackers to manipulate the Python runtime environment by crafting component requests with malicious property paths, enabling arbitrary modification of global objects. Exploitation can lead to reflected and stored Cross-Site Scripting (XSS), Denial of Service (DoS), and authentication bypass in applications using Django-Unicorn. The vulnerability is critical with a CVSS 4.0 score of 9.3. A fix is available in version 0.62.0.