{"action":"Upgrade nautobot to 1.6.16 or later.","affected":[{"fixed":"1.6.16","introduced":"0"},{"fixed":"2.1.9","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2024-29199"],"ecosystem":"PyPI","epss":0.00628,"exploited":false,"fixed_versions":["1.6.16","2.1.9"],"ghsa_id":"GHSA-m732-wvh2-7cq4","id":"tcs_01M5KGV2WCDJPP3XDTHA9Y0KA7","modified_at":"2026-07-07T17:47:06.832533599Z","published_at":"2026-07-07T11:45:36.512992Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1687","https://github.com/nautobot/nautobot/security/advisories/GHSA-m732-wvh2-7cq4","https://nvd.nist.gov/vuln/detail/CVE-2024-29199","https://github.com/nautobot/nautobot/pull/5464","https://github.com/nautobot/nautobot/pull/5465","https://github.com/nautobot/nautobot/commit/2fd95c365f8477b26e06d60b999ddd36882d5750","https://github.com/nautobot/nautobot/commit/dd623e6c3307f48b6357fcc91925bcad5192abfb","https://github.com/nautobot/nautobot","https://github.com/nautobot/nautobot/releases/tag/v1.6.16","https://github.com/nautobot/nautobot/releases/tag/v2.1.9","https://pypi.org/project/nautobot","https://github.com/advisories/GHSA-m732-wvh2-7cq4"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-1687","url":"https://osv.dev/vulnerability/PYSEC-2026-1687"}],"summary":"Unauthenticated views may expose information to anonymous users"}