{"action":"Upgrade nautobot to 2.3.0b1 or later.","affected":[{"fixed":"2.3.0b1","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2024-36112"],"ecosystem":"PyPI","epss":0.00398,"exploited":false,"fixed_versions":["2.3.0b1"],"ghsa_id":"GHSA-qmjf-wc2h-6x3q","id":"tcs_01M5KGM7VSB7YFMZVT9D1NXB3H","modified_at":"2026-06-10T17:14:18.195540763Z","published_at":"2024-05-28T23:15:17Z","references":["https://osv.dev/vulnerability/PYSEC-2024-166","https://github.com/nautobot/nautobot/security/advisories/GHSA-qmjf-wc2h-6x3q","https://github.com/nautobot/nautobot/pull/5757","https://github.com/nautobot/nautobot/pull/5762","https://github.com/advisories/GHSA-qmjf-wc2h-6x3q"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2024-166","url":"https://osv.dev/vulnerability/PYSEC-2024-166"}],"summary":"Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI"}