PyPI/nautobot CVE-2023-25657: unknown, EPSS 1.53%
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properl
Action: Upgrade nautobot to 1.5.7 or later.
pip install nautobot==1.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.7 | - |
Fixed versions
| 1.5.7 |
Sources
- osv: PYSEC-2023-37
- https://jinja.palletsprojects.com/en/3.0.x/sandbox/#sandbox
- https://github.com/nautobot/nautobot/commit/d47f157e83b0c353bb2b697f911882c71cf90ca0
- https://github.com/nautobot/nautobot/security/advisories/GHSA-8mfq-f5wj-vw5m
CVE-2023-25657 · published · modified · JSON