netbox

v4.6.5 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 12d Configuration Management

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

cabling dcim django infrastructure-management ipam netbox

+5 more

network network-automation python sot sysadmin

Summary

AI summary

Broad release touches Bug Fixes, Enhancements, Performance Improvements, and https://github.com/netbox-community/netbox/issues/18828.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds MDC connector type for fiber ports and cables Adds MDC connector type for fiber ports and cables Source: llm_adapter@2026-07-14 Confidence: high	—
Feature	Low	Adds REST API method to update or overwrite an existing custom script module Adds REST API method to update or overwrite an existing custom script module Source: llm_adapter@2026-07-14 Confidence: high	—
Feature	Low	Enforces a lower maximum uploaded image size of 50 megapixels Enforces a lower maximum uploaded image size of 50 megapixels Source: llm_adapter@2026-07-14 Confidence: high	—
Feature	Low	Adds Korean language support Adds Korean language support Source: llm_adapter@2026-07-14 Confidence: high	—
Performance	Medium	Adds prefetch hint to GraphQL `tags` field to avoid N+1 queries on list endpoints Adds prefetch hint to GraphQL `tags` field to avoid N+1 queries on list endpoints Source: llm_adapter@2026-07-14 Confidence: high	—
Performance	Medium	Caches serializers to avoid repeated reinstantiation on the cables list REST API endpoint Caches serializers to avoid repeated reinstantiation on the cables list REST API endpoint Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix
Bugfix	Medium	Corrects the OpenAPI schema for relation counts on nested (brief) object representations Corrects the OpenAPI schema for relation counts on nested (brief) object representations Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Returns the configured maintenance mode message for REST API requests Returns the configured maintenance mode message for REST API requests Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Honors `RAM_BASE_UNIT` for the default memory of a virtual machine type Honors `RAM_BASE_UNIT` for the default memory of a virtual machine type Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Restores the available IPs button for users with constrained permissions Restores the available IPs button for users with constrained permissions Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Requires "change" permission instead of "add" for editing objects via bulk import form Requires "change" permission instead of "add" for editing objects via bulk import form Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Medium	Fixes `ValueError` raised by object‑level permission checks for cross‑app proxy models Fixes `ValueError` raised by object‑level permission checks for cross‑app proxy models Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Avoids name collisions when custom script filename matches a core app label Avoids name collisions when custom script filename matches a core app label Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Prevents uncaught `ValueError` (HTTP 500) from invalid `filter_id` query parameter Prevents uncaught `ValueError` (HTTP 500) from invalid `filter_id` query parameter Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Removes persistent scrollbar on navigation menu in Chrome Removes persistent scrollbar on navigation menu in Chrome Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Ensures shared objects are treated consistently across the UI and REST API Ensures shared objects are treated consistently across the UI and REST API Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Uses theme‑aware color for interface list row separators in dark mode Uses theme‑aware color for interface list row separators in dark mode Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Fixes `ValueError` when viewing background tasks under RQ 2.10 Fixes `ValueError` when viewing background tasks under RQ 2.10 Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Escapes custom link names when rendering fails Escapes custom link names when rendering fails Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Explicitly disables autoescaping for config templates rendered via `SandboxedEnvironment` Explicitly disables autoescaping for config templates rendered via `SandboxedEnvironment` Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Escapes exception message in `render_widget` template tag before marking it safe Escapes exception message in `render_widget` template tag before marking it safe Source: granite4.1:30b@2026-07-15-audit Confidence: low	—

Full changelog

Enhancements

#18828 - Add MDC connector type for fiber ports and cables
#22544 - Provide a REST API method to update or overwrite an existing custom script module
#22629 - Enforce a lower maximum uploaded image size (50 megapixels) than the Pillow default
#22649 - Add Korean language support

Performance Improvements

#22551 - Add a prefetch hint to the GraphQL tags field to avoid N+1 queries on list endpoints
#22589 - Cache serializers to avoid repeated reinstantiation on the cables list REST API endpoint

Bug Fixes

#22154 - Correct the OpenAPI schema for relation counts on nested (brief) object representations
#22500 - Return the configured maintenance mode message for REST API requests
#22521 - Honor RAM_BASE_UNIT for the default memory of a virtual machine type
#22539 - Restore the available IPs button for users with constrained permissions
#22566 - Avoid name collisions when a custom script's filename matches a core app label
#22568 - Fix uncaught ValueError (HTTP 500) when an invalid filter_id query parameter is provided
#22573 - Remove persistent scrollbar on the navigation menu in Chrome
#22578 - Ensure shared objects are treated consistently across the UI and REST API
#22582 - Use a theme-aware color for interface list row separators in dark mode
#22598 - Fix ValueError exception when viewing background tasks under RQ 2.10
#22617 - Require the "change" permission (rather than "add") when editing objects via the bulk import form
#22626 - Ensure custom link names are escaped when rendering fails
#22632 - Fix ValueError raised by object-level permission checks for cross-app proxy models
#22652 - Explicitly disable autoescaping for config templates rendered via SandboxedEnvironment
#22657 - Escape the exception message in the render_widget template tag before marking it safe

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track netbox

Get notified when new releases ship.

About netbox

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

All releases →