CVE-2026-54918

NetBox Device Type Library is a community-sourced collection of device type definitions for import into NetBox. In affected revisions, the NETBOX_DT_LIBRARY_URL constant in tests/test_configuration.py is a free-form tracked value that an unauthenticated pull-request author can modify before the C...

EUVD-2026-82415

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOXDTLIBRARYURL in tests/testconfiguration.py is a free-form tracked constant that an unauthenticated pull-request author can change before the...

CVE-2026-54916

NetBox Device Type Library (a community-sourced collection of device type definitions for import into NetBox) is affected by a module-shadowing vulnerability (CVSS 8.8 HIGH). The absence of tests/__init__.py combined with the lack of --import-mode=importlib causes pytest's prepend import mode to ...

CVE-2026-54916 NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...