{"action":"Upgrade nautobot to 1.6.7 or later.","affected":[{"fixed":"1.6.7","introduced":"1.1.0"},{"fixed":"2.0.6","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2023-50263"],"ecosystem":"PyPI","epss":0.00748,"exploited":false,"fixed_versions":["1.6.7","2.0.6"],"ghsa_id":"GHSA-75mc-3pjc-727q","id":"tcs_01M5KGKAQHWKJP223ZMT0RW9WZ","modified_at":"2026-06-08T11:15:10.089080568Z","published_at":"2023-12-12T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-286","https://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q","https://github.com/nautobot/nautobot/pull/4959","https://github.com/nautobot/nautobot/pull/4964","https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee","https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee","https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2023-286","url":"https://osv.dev/vulnerability/PYSEC-2023-286"}],"summary":"Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 1.x and 2.0.x prior t"}