PyPI/nautobot CVE-2024-36112: unknown, EPSS 0.40%
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI
Action: Upgrade nautobot to 2.3.0b1 or later.
pip install nautobot==2.3.0b1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.0b1 | - |
Fixed versions
| 2.3.0b1 |
Sources
- osv: PYSEC-2024-166
- https://github.com/nautobot/nautobot/security/advisories/GHSA-qmjf-wc2h-6x3q
- https://github.com/nautobot/nautobot/pull/5757
- https://github.com/nautobot/nautobot/pull/5762
- https://github.com/advisories/GHSA-qmjf-wc2h-6x3q
CVE-2024-36112 · published · modified · JSON