netbox-community/netbox-napalm-plugin v0.3.7

on GitHub

Release 0.3.7 (NetBox 4.7.0–4.7.99).

Changes

• #66 — Enforce object-level napalm_read permission on the NAPALM device API endpoint, and render device facts as text on the Status tab (fixes DOM XSS, #65)
• #67 — Bump dev/build dependencies flagged by Dependabot (black, pip, esbuild)
• #68 — Version bump to 0.3.7, COMPATIBILITY.md and changelog

Testing

The permission and XSS fixes were verified against a live NetBox 4.7.2 container (scoped user gets 404 for out-of-scope devices; hostile device facts render as text).