📦 Nautobot

by Networktocode

🔍 What is Nautobot?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-49142

HIGH CVSS 7.1 Jun 10, 2025

This vulnerability in Nautobot allows malicious users to exploit Jinja2 templating features to expose secret values or modify data without proper permissions. All users of Nautobot versions before 1.6...

CVE-2024-32979

HIGH CVSS 7.5 May 1, 2024

CVE-2024-32979 is a reflected cross-site scripting vulnerability in Nautobot's filterable object-list views. Attackers can craft malicious URLs that execute arbitrary JavaScript in victims' browsers w...

CVE-2023-48705

HIGH CVSS 7.1 Nov 22, 2023

Nautobot versions before 1.6.6 and 2.0.5 contain a stored cross-site scripting vulnerability in user-authored content rendering. Users with permission to create/edit custom links, job buttons, or comp...

CVE-2024-36112

MEDIUM CVSS 6.3 May 28, 2024

This vulnerability allows users with Dynamic Group viewing permissions to see all member objects within those groups, bypassing normal object-level permission checks. For example, a user could view al...