{"action":"Upgrade nautobot to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"1.5.14"},{"fixed":"2.1.0","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2023-51649"],"ecosystem":"PyPI","epss":0.00452,"exploited":false,"fixed_versions":["1.6.8","2.1.0"],"ghsa_id":"GHSA-vf5m-xrhm-v999","id":"tcs_01M5KGKAWYRA2NFPE5ZAKJQSH4","modified_at":"2026-06-08T11:15:05.721632481Z","published_at":"2023-12-22T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-287","https://github.com/nautobot/nautobot/security/advisories/GHSA-vf5m-xrhm-v999","https://github.com/nautobot/nautobot/issues/4988","https://github.com/nautobot/nautobot/pull/4993","https://github.com/nautobot/nautobot/pull/4995"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2023-287","url":"https://osv.dev/vulnerability/PYSEC-2023-287"}],"summary":"Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitting a Job to run via"}