Skip to content
OpenAdvisories

Product · netbox-community

devicetype-library

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.6

    NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_data function…