galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57175 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +3 more potentially affected by CVE-2025-49143 via nautobot (>=2.0.0, <=2.4.5)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2025-49143 Source advisory: OSV:PYSEC-2026-1689...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: OSV:PYSEC-2026-1686...

Insertion of Sensitive Information into Externally-Accessible File or Directory

Overview nautobot-ssot is a Nautobot Single Source of Truth Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory by placing the Service Now public instance name e.g. companyname.service-now.com in a generic django view...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +3 more potentially affected by CVE-2025-49142 via nautobot (>=2.0.0, <=2.4.5)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2025-49142 Source advisory: OSV:GHSA-WJW6-95H5-4JPX...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2025-49142 via nautobot (>=1.0.3, <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-49142 Source advisory: OSV:GHSA-WJW6-95H5-4JPX...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2025-49143 via nautobot (>=1.0.3, <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-49143 Source advisory: SNYK:PYTHON-NAUTOBOT-10337820...

nautobot-device-resources (1.0.0), nautobot-ssot (>=2.0.0, <=2.5.0) potentially affected by CVE-2024-32979 via nautobot (>=2.0.0, <=2.2.0)

nautobot PYPI version =2.0.0, =2.0.0, =2.5.0 Source cves: CVE-2024-32979 Source advisory: MEND:CVE-2024-32979...

nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)

nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: GHSA-JXGR-GCJ5-CQQG...

nautobot-device-resources (1.0.0), nautobot-ssot (>=2.0.0, <=2.5.0) potentially affected by CVE-2024-32979 via nautobot (>=2.0.0, <=2.2.0)

nautobot PYPI version =2.0.0, =2.0.0, =2.5.0 Source cves: CVE-2024-32979 Source advisory: OSV:GHSA-JXGR-GCJ5-CQQG...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2024-23345 via nautobot (>=1.0.3, <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2024-23345 Source advisory: OSV:GHSA-V4XV-795H-RV4H...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-golden-config (>=0.9.2.dev0, <=0.9.4) +3 more potentially affected by CVE-2023-25657 via nautobot (>=1.0.3, <=1.2.11)

nautobot PYPI version =1.0.3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2023-25657 Source advisory: OSV:PYSEC-2023-37...

nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-golden-config (>=0.9.2.dev0, <=0.9.4) +3 more potentially affected by CVE-2023-25657 via nautobot (>=1.0.3, <=1.2.11)

nautobot PYPI version =1.0.3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2023-25657 Source advisory: MEND:CVE-2023-25657...