VYPR

Devicetype Library

by Netbox Community

Source repositories

CVEs (4)

  • CVE-2026-54752CriSep 17, 2026
    risk 0.55cvss 9.6epss 0.01

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_data function in…

  • CVE-2026-54916HigSep 17, 2026
    risk 0.50cvss 8.8epss 0.01

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during…

  • CVE-2026-55251MedOct 1, 2026
    risk 0.35cvss 6.5epss 0.00

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pull_request and executes code supplied by the pull request before any maintainer…

  • CVE-2026-54918MedSep 17, 2026
    risk 0.27cvss 5.3epss 0.00

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOX_DT_LIBRARY_URL in tests/test_configuration.py is a free-form tracked constant that an unauthenticated pull-request author…