agentprime: netbox-community-devicetype-libraryEvery new CVE for netbox-community-devicetype-library.https://agentprime.io/CVE-2026-55251: NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Fileshttps://agentprime.io/advisories/CVE-2026-55251/https://agentprime.io/advisories/CVE-2026-55251/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:49:32 GMTCVECVE-2026-54918: NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CIhttps://agentprime.io/advisories/CVE-2026-54918/https://agentprime.io/advisories/CVE-2026-54918/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:03:08 GMTCVECVE-2026-54916: NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential thefthttps://agentprime.io/advisories/CVE-2026-54916/https://agentprime.io/advisories/CVE-2026-54916/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:01:14 GMTCVECVE-2026-54752: NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Requesthttps://agentprime.io/advisories/CVE-2026-54752/https://agentprime.io/advisories/CVE-2026-54752/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 19:56:16 GMTCVEcritical