{"action":"Upgrade nautobot to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2023-46128"],"ecosystem":"PyPI","epss":0.00667,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-r2hw-74xv-4gqp","id":"tcs_01M5KGJYW7V2E3V1555A9MZN2Q","modified_at":"2023-11-08T04:13:40.821501Z","published_at":"2023-10-25T18:17:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-220","https://github.com/nautobot/nautobot/security/advisories/GHSA-r2hw-74xv-4gqp","https://github.com/nautobot/nautobot/pull/4692","https://github.com/nautobot/nautobot/commit/1ce8e5c658a075c29554d517cd453675e5d40d71"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-220","url":"https://osv.dev/vulnerability/PYSEC-2023-220"}],"summary":"Nautobot is a Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 2.0.x, certain REST API endpoints, in combination"}