devicetype-library vulnerabilities

2 known vulnerabilities in devicetype-library from Netbox-community. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  devicetype-library: Uncontrolled Search Path Element

  CVE-2026-54916Sep 17, 2026Netbox-community

  NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of s

• 9.6 Critical severity

  devicetype-library: Deserialization of Untrusted Data

  CVE-2026-54752Sep 17, 2026Netbox-community

  NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_data function