PyPI/nautobot CVE-2024-29199: low 3.7, EPSS 0.63%
Unauthenticated views may expose information to anonymous users
Action: Upgrade nautobot to 1.6.16 or later.
pip install nautobot==1.6.16pip install nautobot==2.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.16 | - |
| 2.0.0 | 2.1.9 | - |
Fixed versions
| 1.6.16 | 2.1.9 |
Sources
- osv: PYSEC-2026-1687
- https://github.com/nautobot/nautobot/security/advisories/GHSA-m732-wvh2-7cq4
- https://nvd.nist.gov/vuln/detail/CVE-2024-29199
- https://github.com/nautobot/nautobot/pull/5464
- https://github.com/nautobot/nautobot/pull/5465
- https://github.com/nautobot/nautobot/commit/2fd95c365f8477b26e06d60b999ddd36882d5750
- https://github.com/nautobot/nautobot/commit/dd623e6c3307f48b6357fcc91925bcad5192abfb
- https://github.com/nautobot/nautobot
- https://github.com/nautobot/nautobot/releases/tag/v1.6.16
- https://github.com/nautobot/nautobot/releases/tag/v2.1.9
- https://pypi.org/project/nautobot
- https://github.com/advisories/GHSA-m732-wvh2-7cq4
CVE-2024-29199 · published · modified · JSON