Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could …

A vulnerability in Nautobot Network Source of Truth and Network Automation Platform allows users with GitRepository record access to improperly modify the current_head field via REST API. This unintended user-editable field could cause local repository clones to checkout incorrect commits, resulting in misleading state or complete repository unusability. The vulnerability affects versions prior to 2.4.33 and 3.1.2, and has been fixed in these releases.