{"action":"Upgrade nautobot to 2.4.33 or later.","affected":[{"fixed":"3.1.2","introduced":"3.0.0a2"},{"fixed":"2.4.33","introduced":"0"}],"component":"nautobot","cve_ids":["CVE-2026-44797"],"ecosystem":"PyPI","epss":0.00235,"exploited":false,"fixed_versions":["3.1.2","2.4.33"],"ghsa_id":"GHSA-c35q-vxrp-ph26","id":"tcs_01M5KFC12JVZETRMJ5SF1DP37N","modified_at":"2026-07-13T07:26:49.045196052Z","published_at":"2026-05-13T15:30:59Z","references":["https://osv.dev/vulnerability/GHSA-c35q-vxrp-ph26","https://github.com/nautobot/nautobot/security/advisories/GHSA-c35q-vxrp-ph26","https://nvd.nist.gov/vuln/detail/CVE-2026-44797","https://github.com/nautobot/nautobot/commit/16aa4aa9796ab7a31c4d615ec945e1f16d8c77c4","https://github.com/nautobot/nautobot/commit/7324c8f0d8c7245fbc691e15d729adc2d2707d08","https://github.com/nautobot/nautobot","https://github.com/nautobot/nautobot/releases/tag/v2.4.33","https://github.com/nautobot/nautobot/releases/tag/v3.1.2"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-c35q-vxrp-ph26","url":"https://osv.dev/vulnerability/GHSA-c35q-vxrp-ph26"}],"summary":"Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)"}