What’s Vulnerable › Products

netbox-community devicetype-library vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your netbox-community devicetype-library version is affected

Latest netbox-community devicetype-library vulnerabilities

• CVE-2026-55251 — NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files (CVSS 6.5)
• CVE-2026-54918 — NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI (CVSS 5.3)
• CVE-2026-54916 — NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft (CVSS 8.8)
• CVE-2026-54752 — NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request (CVSS 9.6)