PyPI/nautobot CVE-2023-50263: medium 5.3, EPSS 0.75%
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 1.x and 2.0.x prior t
Action: Upgrade nautobot to 1.6.7 or later.
pip install nautobot==1.6.7pip install nautobot==2.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.6.7 | - |
| 2.0.0 | 2.0.6 | - |
Fixed versions
| 1.6.7 | 2.0.6 |
Sources
- osv: PYSEC-2023-286
- https://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q
- https://github.com/nautobot/nautobot/pull/4959
- https://github.com/nautobot/nautobot/pull/4964
- https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee
- https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee
- https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py
CVE-2023-50263 · published · modified · JSON