nautobot-device-onboarding (>=4.0.0b1, <=4.0.1), nautobot-ssot-unifi (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-62607 via nautobot-ssot (2.8.1)

nautobot-ssot PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-device-onboarding =4.0.0b1, =1.0.0, =1.0.1 Source cves: CVE-2025-62607 Source advisory: OSV:PYSEC-2026-1690...

nautobot-device-onboarding (>=4.0.0b1, <=4.0.1), nautobot-ssot-aristacv (>=1.0.0.dev0, <=1.6.1) +5 more potentially affected by CVE-2025-62607 via nautobot-ssot (>=1.0.0, <=3.9.4)

nautobot-ssot PYPI version =1.0.0, =4.0.0b1, =1.0.0.dev0, =0.0.1.dev0, =0.0.3.dev0, =0.9.0, =1.0.0, =0.1.0, =0.1.4 Source cves: CVE-2025-62607 Source advisory: MEND:CVE-2025-62607...

nautobot-device-onboarding (>=4.0.0b1, <=4.0.1), nautobot-ssot-unifi (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-62607 via nautobot-ssot (2.8.1)

nautobot-ssot PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-device-onboarding =4.0.0b1, =1.0.0, =1.0.1 Source cves: CVE-2025-62607 Source advisory: OSV:GHSA-535G-62R7-CX6V...

Clear Text Credentials Exposed via Onboarding Task

Impact When credentials are provided while creating an OnboardingTask they may be visible via the Job Results view under the Additional Data tab as args for the Celery Task execution. This only applies to OnboardingTasks that are created with credentials specified while on v2.0.0-2.0.2 of Nautobo...

CVE-2023-48700

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

Code injection

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

PYSEC-2023-288

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

CVE-2023-48700

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

PT-2023-30909

Name of the Vulnerable Software and Affected Versions Nautobot Device Onboarding plugin versions 2.0.0 through 2.0.2 Nautobot Device Onboarding plugin versions 2.0.0 through 2.0.x Description The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding...

CVE-2023-48700: Plaintext Storage of a Password

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...