GHSA-CF9F-WMHP-V4PR Cross-site Scripting potential in custom links, job buttons, and computed fields

Impact All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected. Due to incorrect usage of Django's marksafe API when rendering certain types of user-authored content, including: - custom links - job buttons - computed fields it is possible that users with permission to...

CVE-2023-48705

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected by a cross-site scripting vulnerability. Due to incorrect usage of Django's "marksafe" API when rendering certain...

PT-2023-30913

Name of the Vulnerable Software and Affected Versions Nautobot versions prior to 1.6.6 Nautobot versions prior to 2.0.5 Description The issue is related to a cross-site scripting vulnerability due to the incorrect usage of Django's mark safe API when rendering certain types of user-authored...