Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/10357?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/10357?format=api", "purl": "pkg:pypi/ansible@2.5.4", "type": "pypi", "namespace": "", "name": "ansible", "version": "2.5.4", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8085?format=api", "vulnerability_id": "VCID-3jxq-kxnz-6bfh", "summary": "A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1925002", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1925002" }, { "reference_url": "https://github.com/advisories/GHSA-5rrg-rr89-x9mv", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-5rrg-rr89-x9mv" }, { "reference_url": "https://github.com/ansible/ansible/pull/73487", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/73487" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17040?format=api", "purl": "pkg:pypi/ansible@2.9.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19" } ], "aliases": [ "CVE-2021-20228", "GHSA-5rrg-rr89-x9mv", "PYSEC-2021-1" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3jxq-kxnz-6bfh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7858?format=api", "vulnerability_id": "VCID-4331-d5yy-uybc", "summary": "A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with \"umask 77 && mkdir -p <dir>\"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00027", "scoring_system": "epss", "scoring_elements": "0.08127", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1733" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733" }, { "reference_url": "https://github.com/advisories/GHSA-g4mq-6fp5-qwcf", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-g4mq-6fp5-qwcf" }, { "reference_url": "https://github.com/ansible/ansible/issues/67791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67791" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13773?format=api", "purl": "pkg:pypi/ansible@2.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1733", "GHSA-g4mq-6fp5-qwcf", "PYSEC-2020-5" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4331-d5yy-uybc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5842?format=api", "vulnerability_id": "VCID-5mcc-gtrr-j3e4", "summary": "information disclosure", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774" }, { "reference_url": "https://github.com/advisories/GHSA-wv5p-gmmv-wh9v", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-wv5p-gmmv-wh9v" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes," }, { "reference_url": "https://github.com/ansible-collections/community.general/pull/1635,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/community.general/pull/1635," }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/" }, { "reference_url": "https://security.archlinux.org/ASA-202102-9", "reference_id": "ASA-202102-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-9" }, { "reference_url": "https://security.archlinux.org/AVG-1437", "reference_id": "AVG-1437", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1437" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17038?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" } ], "aliases": [ "CVE-2021-20178", "GHSA-wv5p-gmmv-wh9v", "PYSEC-2021-106" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5mcc-gtrr-j3e4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7867?format=api", "vulnerability_id": "VCID-6hdk-ywcn-4qe4", "summary": "A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16115", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1753" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753" }, { "reference_url": "https://github.com/advisories/GHSA-86hp-cj9j-33vv", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-86hp-cj9j-33vv" }, { "reference_url": "https://github.com/ansible-collections/kubernetes/pull/51", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/kubernetes/pull/51" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11299?format=api", "purl": "pkg:pypi/ansible@2.7.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/13873?format=api", "purl": "pkg:pypi/ansible@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/13874?format=api", "purl": "pkg:pypi/ansible@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7" } ], "aliases": [ "CVE-2020-1753", "GHSA-86hp-cj9j-33vv", "PYSEC-2020-210" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6hdk-ywcn-4qe4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7759?format=api", "vulnerability_id": "VCID-6smx-ju23-8qes", "summary": "In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3201", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3201" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3202", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3203", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3203" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3207", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3207" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:0756" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30132", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14846" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846" }, { "reference_url": "https://github.com/ansible/ansible/pull/63366", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/63366" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13124?format=api", "purl": "pkg:pypi/ansible@2.6.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/11295?format=api", "purl": "pkg:pypi/ansible@2.7.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/13125?format=api", "purl": "pkg:pypi/ansible@2.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6" } ], "aliases": [ "CVE-2019-14846", "PYSEC-2019-4" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6smx-ju23-8qes" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7855?format=api", "vulnerability_id": "VCID-6swz-79ue-bbef", "summary": "A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHBA-2020:0547", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2020:0547" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2020:1539", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2020:1539" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1734", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24234", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1734" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801804", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801804" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734" }, { "reference_url": "https://github.com/advisories/GHSA-h39q-95q5-9jfp", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-h39q-95q5-9jfp" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b" }, { "reference_url": "https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0" }, { "reference_url": "https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f" }, { "reference_url": "https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0" }, { "reference_url": "https://github.com/ansible/ansible/issues/67792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67792" }, { "reference_url": "https://github.com/ansible/ansible/issues/70159", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/70159" }, { "reference_url": "https://github.com/ansible/ansible/pull/70596", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/70596" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2020-1734", "reference_id": "CVE-2020-1734", "reference_type": "", "scores": [], "url": "https://access.redhat.com/security/cve/CVE-2020-1734" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1734", "reference_id": "CVE-2020-1734", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1734" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/14352?format=api", "purl": "pkg:pypi/ansible@2.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/17008?format=api", "purl": "pkg:pypi/ansible@2.9.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/17068?format=api", "purl": "pkg:pypi/ansible@2.10.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1" } ], "aliases": [ "CVE-2020-1734", "GHSA-h39q-95q5-9jfp", "PYSEC-2020-6" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6swz-79ue-bbef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7654?format=api", "vulnerability_id": "VCID-7f2g-zz9p-sufc", "summary": "ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3835", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3835" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3836", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3837" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3838", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3838" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0564", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0564" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0590", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0590" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01236", "scoring_system": "epss", "scoring_elements": "0.79535", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16876" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da" }, { "reference_url": "https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7" }, { "reference_url": "https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099" }, { "reference_url": "https://github.com/ansible/ansible/issues/51318", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/51318" }, { "reference_url": "https://github.com/ansible/ansible/pull/49569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/49569" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "http://www.securityfocus.com/bid/106225", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/106225" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16876", "reference_id": "CVE-2018-16876", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16876" }, { "reference_url": "https://github.com/advisories/GHSA-j569-fghw-f9rx", "reference_id": "GHSA-j569-fghw-f9rx", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-j569-fghw-f9rx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11460?format=api", "purl": "pkg:pypi/ansible@2.5.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/11461?format=api", "purl": "pkg:pypi/ansible@2.6.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/11286?format=api", "purl": "pkg:pypi/ansible@2.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.5" } ], "aliases": [ "CVE-2018-16876", "GHSA-j569-fghw-f9rx", "PYSEC-2019-141" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7f2g-zz9p-sufc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7628?format=api", "vulnerability_id": "VCID-826d-vdw1-dbaj", "summary": "Ansible \"User\" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3460", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3460" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3461", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3462", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3463", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3463" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3505" }, { "reference_url": "https://access.redhat.com/security/cve/cve-2018-16837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/security/cve/cve-2018-16837" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00024", "scoring_system": "epss", "scoring_elements": "0.07112", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16837" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1" }, { "reference_url": "https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4" }, { "reference_url": "https://github.com/ansible/ansible/pull/47436", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/47436" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "http://www.securityfocus.com/bid/105700", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/105700" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16837", "reference_id": "CVE-2018-16837", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16837" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11132?format=api", "purl": "pkg:pypi/ansible@2.5.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/11131?format=api", "purl": "pkg:pypi/ansible@2.6.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/11130?format=api", "purl": "pkg:pypi/ansible@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.1" } ], "aliases": [ "CVE-2018-16837", "PYSEC-2018-44" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-826d-vdw1-dbaj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8103?format=api", "vulnerability_id": "VCID-95kg-bk3s-g7gx", "summary": "A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20041", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10729" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1831089", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1831089" }, { "reference_url": "https://github.com/advisories/GHSA-r6h7-5pq2-j77h", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-r6h7-5pq2-j77h" }, { "reference_url": "https://github.com/ansible/ansible/issues/34144", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/34144" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-10729", "GHSA-r6h7-5pq2-j77h", "PYSEC-2021-105" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-95kg-bk3s-g7gx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7942?format=api", "vulnerability_id": "VCID-axds-bd49-fbdj", "summary": "A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11344", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14904" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944" }, { "reference_url": "https://github.com/advisories/GHSA-gwr8-5j83-483c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-gwr8-5j83-483c" }, { "reference_url": "https://github.com/ansible/ansible/pull/65686", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/65686" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11296?format=api", "purl": "pkg:pypi/ansible@2.7.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/13560?format=api", "purl": "pkg:pypi/ansible@2.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/13774?format=api", "purl": "pkg:pypi/ansible@2.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2" } ], "aliases": [ "CVE-2019-14904", "GHSA-gwr8-5j83-483c", "PYSEC-2020-161" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-axds-bd49-fbdj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7871?format=api", "vulnerability_id": "VCID-b423-t4kx-eqbq", "summary": "A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33455", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1735" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735" }, { "reference_url": "https://github.com/advisories/GHSA-gfr2-qpxh-qj9m", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-gfr2-qpxh-qj9m" }, { "reference_url": "https://github.com/ansible/ansible/issues/67793", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67793" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1735", "GHSA-gfr2-qpxh-qj9m", "PYSEC-2020-7" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b423-t4kx-eqbq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7950?format=api", "vulnerability_id": "VCID-b8cv-v25q-1kh3", "summary": "An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44392", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14330" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330" }, { "reference_url": "https://github.com/advisories/GHSA-785x-qw4v-6872", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-785x-qw4v-6872" }, { "reference_url": "https://github.com/ansible/ansible/issues/68400", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/68400" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17069?format=api", "purl": "pkg:pypi/ansible@2.10.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0" } ], "aliases": [ "CVE-2020-14330", "GHSA-785x-qw4v-6872", "PYSEC-2020-3" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b8cv-v25q-1kh3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7686?format=api", "vulnerability_id": "VCID-bmq3-uckn-tfhk", "summary": "Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3744", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3744" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3789" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.09087", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3828" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828" }, { "reference_url": "https://github.com/advisories/GHSA-74vq-h4q8-x6jv", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-74vq-h4q8-x6jv" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110" }, { "reference_url": "https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333" }, { "reference_url": "https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93" }, { "reference_url": "https://github.com/ansible/ansible/pull/52133", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/52133" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3828", "reference_id": "CVE-2019-3828", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3828" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11956?format=api", "purl": "pkg:pypi/ansible@2.5.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/11957?format=api", "purl": "pkg:pypi/ansible@2.6.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/11289?format=api", "purl": "pkg:pypi/ansible@2.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8" } ], "aliases": [ "CVE-2019-3828", "GHSA-74vq-h4q8-x6jv", "PYSEC-2019-5" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bmq3-uckn-tfhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7857?format=api", "vulnerability_id": "VCID-brft-snn6-guc8", "summary": "A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.35898", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1737" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737" }, { "reference_url": "https://github.com/advisories/GHSA-893h-35v4-mxqx", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-893h-35v4-mxqx" }, { "reference_url": "https://github.com/ansible/ansible/issues/67795", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67795" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1737", "GHSA-893h-35v4-mxqx", "PYSEC-2020-9" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-brft-snn6-guc8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7580?format=api", "vulnerability_id": "VCID-ce7n-7xet-pyav", "summary": "Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHBA-2018:3788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2018:3788" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:1948", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:1948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:1949", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:1949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2022", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2022" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2079", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2184", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2184" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2585" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0054", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0054" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10855", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02987", "scoring_system": "epss", "scoring_elements": "0.8678", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10855" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10855", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10855" }, { "reference_url": "https://github.com/advisories/GHSA-jwcc-j78w-j73w", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-jwcc-j78w-j73w" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-42.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-42.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10855", "reference_id": "CVE-2018-10855", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10855" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10358?format=api", "purl": "pkg:pypi/ansible@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-826d-vdw1-dbaj" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-kva6-sjfx-rbe3" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qbws-64b9-83fc" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.5" } ], "aliases": [ "CVE-2018-10855", "GHSA-jwcc-j78w-j73w", "PYSEC-2018-42" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ce7n-7xet-pyav" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5428?format=api", "vulnerability_id": "VCID-enwa-2cfn-5uab", "summary": "arbitrary command execution", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968412", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968412" }, { "reference_url": "https://github.com/advisories/GHSA-2pfh-q76x-gwvm", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-2pfh-q76x-gwvm" }, { "reference_url": "https://security.archlinux.org/AVG-2260", "reference_id": "AVG-2260", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2260" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3583", "reference_id": "CVE-2021-3583", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3583" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17048?format=api", "purl": "pkg:pypi/ansible@2.9.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23" } ], "aliases": [ "CVE-2021-3583", "GHSA-2pfh-q76x-gwvm", "PYSEC-2021-358" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-enwa-2cfn-5uab" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7764?format=api", "vulnerability_id": "VCID-gnq4-v5a7-m3ew", "summary": "A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3201", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3201" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3202", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3203", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3203" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3207", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3207" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:0756" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14858", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.1264", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14858" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11307?format=api", "purl": "pkg:pypi/ansible@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-mk3k-n9wn-q3ct" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1" } ], "aliases": [ "CVE-2019-14858", "PYSEC-2019-171" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gnq4-v5a7-m3ew" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7870?format=api", "vulnerability_id": "VCID-hyr1-b223-bkef", "summary": "A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1736", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18673", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1736" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736" }, { "reference_url": "https://github.com/advisories/GHSA-x7jh-595q-wq82", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-x7jh-595q-wq82" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/ansible/ansible/issues/67794", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67794" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1736", "reference_id": "CVE-2020-1736", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1736" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1736", "GHSA-x7jh-595q-wq82", "PYSEC-2020-8" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hyr1-b223-bkef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5516?format=api", "vulnerability_id": "VCID-kgjy-7kdy-c3cg", "summary": "information disclosure", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956477", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956477" }, { "reference_url": "https://security.archlinux.org/AVG-2056", "reference_id": "AVG-2056", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2056" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21283?format=api", "purl": "pkg:pypi/ansible@3.0.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0" } ], "aliases": [ "CVE-2021-3533", "PYSEC-2021-126" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kgjy-7kdy-c3cg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7586?format=api", "vulnerability_id": "VCID-kva6-sjfx-rbe3", "summary": "A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2018:3788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2018:3788" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2150", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2151", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2152", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2152" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2166", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2166" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2321", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2321" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2585" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0054", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0054" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10875", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.20957", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10875" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "http://www.securitytracker.com/id/1041396", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1041396" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10875", "reference_id": "CVE-2018-10875", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10875" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10361?format=api", "purl": "pkg:pypi/ansible@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-826d-vdw1-dbaj" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10362?format=api", "purl": "pkg:pypi/ansible@2.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-826d-vdw1-dbaj" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1" } ], "aliases": [ "CVE-2018-10875", "PYSEC-2018-43" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kva6-sjfx-rbe3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7985?format=api", "vulnerability_id": "VCID-m87b-eb5y-8ydf", "summary": "A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25635", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.236", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25635" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635" }, { "reference_url": "https://github.com/ansible/ansible", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible" }, { "reference_url": "https://github.com/ansible-collections/community.aws/issues/222", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/community.aws/issues/222" }, { "reference_url": "https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25635", "reference_id": "CVE-2020-25635", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25635" }, { "reference_url": "https://github.com/advisories/GHSA-f556-49jc-4rvc", "reference_id": "GHSA-f556-49jc-4rvc", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-f556-49jc-4rvc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17303?format=api", "purl": "pkg:pypi/ansible@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1" } ], "aliases": [ "CVE-2020-25635", "GHSA-f556-49jc-4rvc", "PYSEC-2020-220" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m87b-eb5y-8ydf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7868?format=api", "vulnerability_id": "VCID-n2b8-e8fa-2ue1", "summary": "A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes \"ansible-vault edit\", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34646", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1740" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740" }, { "reference_url": "https://github.com/advisories/GHSA-vcg8-98q8-g7mj", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-vcg8-98q8-g7mj" }, { "reference_url": "https://github.com/ansible/ansible/issues/67798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67798" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1740", "GHSA-vcg8-98q8-g7mj", "PYSEC-2020-12" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n2b8-e8fa-2ue1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7579?format=api", "vulnerability_id": "VCID-qbws-64b9-83fc", "summary": "In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHBA-2018:3788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHBA-2018:3788" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2150", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2151", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2152", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2152" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2166", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2166" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2321", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2321" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2585" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0054", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0054" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10874", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.16077", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10874" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "http://www.securitytracker.com/id/1041396", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1041396" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10874", "reference_id": "CVE-2018-10874", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10874" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10361?format=api", "purl": "pkg:pypi/ansible@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-826d-vdw1-dbaj" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10362?format=api", "purl": "pkg:pypi/ansible@2.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-826d-vdw1-dbaj" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1" } ], "aliases": [ "CVE-2018-10874", "PYSEC-2018-81" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qbws-64b9-83fc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1054?format=api", "vulnerability_id": "VCID-qtt6-8kf8-1fbt", "summary": "information disclosure", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975767" }, { "reference_url": "https://github.com/advisories/GHSA-4r65-35qq-ch8j", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-4r65-35qq-ch8j" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes" }, { "reference_url": "https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0" }, { "reference_url": "https://security.archlinux.org/AVG-1941", "reference_id": "AVG-1941", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1941" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3620", "reference_id": "CVE-2021-3620", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3620" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/17056?format=api", "purl": "pkg:pypi/ansible@2.9.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.27" } ], "aliases": [ "CVE-2021-3620", "GHSA-4r65-35qq-ch8j", "PYSEC-2022-164" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qtt6-8kf8-1fbt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7869?format=api", "vulnerability_id": "VCID-rarq-tdjt-hff3", "summary": "A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1738", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00215", "scoring_system": "epss", "scoring_elements": "0.44079", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1738" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738" }, { "reference_url": "https://github.com/advisories/GHSA-f85h-23mf-2fwh", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-f85h-23mf-2fwh" }, { "reference_url": "https://github.com/ansible/ansible/issues/67796", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67796" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1738", "GHSA-f85h-23mf-2fwh", "PYSEC-2020-10" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rarq-tdjt-hff3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7863?format=api", "vulnerability_id": "VCID-rnub-zmb6-5yhw", "summary": "A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument \"password\" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.1474", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1739" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739" }, { "reference_url": "https://github.com/advisories/GHSA-923p-fr2c-g5m2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-923p-fr2c-g5m2" }, { "reference_url": "https://github.com/ansible/ansible/issues/67797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/issues/67797" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11298?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/13778?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/13779?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-ydka-2etb-hue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1739", "GHSA-923p-fr2c-g5m2", "PYSEC-2020-11" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rnub-zmb6-5yhw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5840?format=api", "vulnerability_id": "VCID-uvca-5e2n-pqew", "summary": "information disclosure", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1916813", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1916813" }, { "reference_url": "https://github.com/advisories/GHSA-8f4m-hccc-8qph", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-8f4m-hccc-8qph" }, { "reference_url": "https://security.archlinux.org/ASA-202102-9", "reference_id": "ASA-202102-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-9" }, { "reference_url": "https://security.archlinux.org/AVG-1437", "reference_id": "AVG-1437", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1437" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20863?format=api", "purl": "pkg:pypi/ansible@2.10.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-kgjy-7kdy-c3cg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/17019?format=api", "purl": "pkg:pypi/ansible@2.8.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/17038?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" } ], "aliases": [ "CVE-2021-20191", "GHSA-8f4m-hccc-8qph", "PYSEC-2021-124" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uvca-5e2n-pqew" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7736?format=api", "vulnerability_id": "VCID-xn7b-vz2e-6qdh", "summary": "A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3744", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3744" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3789" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00589", "scoring_system": "epss", "scoring_elements": "0.69494", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10156" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156" }, { "reference_url": "https://github.com/advisories/GHSA-grgm-pph5-j5h7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-grgm-pph5-j5h7" }, { "reference_url": "https://github.com/ansible/ansible/pull/57188", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/57188" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/12698?format=api", "purl": "pkg:pypi/ansible@2.6.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/11293?format=api", "purl": "pkg:pypi/ansible@2.7.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/12699?format=api", "purl": "pkg:pypi/ansible@2.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-mk3k-n9wn-q3ct" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2" } ], "aliases": [ "CVE-2019-10156", "GHSA-grgm-pph5-j5h7", "PYSEC-2019-2" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xn7b-vz2e-6qdh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7641?format=api", "vulnerability_id": "VCID-zcmk-4k97-kkd9", "summary": "Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3770", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3770" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3771", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3771" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3772", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3772" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3773" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25744", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16859" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859" }, { "reference_url": "https://cwe.mitre.org/data/definitions/200.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cwe.mitre.org/data/definitions/200.html" }, { "reference_url": "https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c" }, { "reference_url": "https://github.com/ansible/ansible/pull/49142", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/49142" }, { "reference_url": "http://www.securityfocus.com/bid/106004", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/106004" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/11281?format=api", "purl": "pkg:pypi/ansible@2.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/11308?format=api", "purl": "pkg:pypi/ansible@2.5.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/11283?format=api", "purl": "pkg:pypi/ansible@2.6.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/11309?format=api", "purl": "pkg:pypi/ansible@2.6.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/11285?format=api", "purl": "pkg:pypi/ansible@2.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zcmk-4k97-kkd9" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/11306?format=api", "purl": "pkg:pypi/ansible@2.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-6swz-79ue-bbef" }, { "vulnerability": "VCID-7f2g-zz9p-sufc" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-bmq3-uckn-tfhk" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-gnq4-v5a7-m3ew" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/11307?format=api", "purl": "pkg:pypi/ansible@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-39vn-b7y4-v3ez" }, { "vulnerability": "VCID-3jxq-kxnz-6bfh" }, { "vulnerability": "VCID-4331-d5yy-uybc" }, { "vulnerability": "VCID-4tfv-snmv-bbax" }, { "vulnerability": "VCID-52zf-mjec-f3d5" }, { "vulnerability": "VCID-5mcc-gtrr-j3e4" }, { "vulnerability": "VCID-6hdk-ywcn-4qe4" }, { "vulnerability": "VCID-6smx-ju23-8qes" }, { "vulnerability": "VCID-7d8z-g99x-7qh2" }, { "vulnerability": "VCID-95kg-bk3s-g7gx" }, { "vulnerability": "VCID-aq21-sp74-17gk" }, { "vulnerability": "VCID-axds-bd49-fbdj" }, { "vulnerability": "VCID-b423-t4kx-eqbq" }, { "vulnerability": "VCID-b8cv-v25q-1kh3" }, { "vulnerability": "VCID-brft-snn6-guc8" }, { "vulnerability": "VCID-bvsa-kz7r-zyea" }, { "vulnerability": "VCID-enwa-2cfn-5uab" }, { "vulnerability": "VCID-hyr1-b223-bkef" }, { "vulnerability": "VCID-kgjy-7kdy-c3cg" }, { "vulnerability": "VCID-m87b-eb5y-8ydf" }, { "vulnerability": "VCID-mk3k-n9wn-q3ct" }, { "vulnerability": "VCID-n2b8-e8fa-2ue1" }, { "vulnerability": "VCID-nx86-xnct-afbs" }, { "vulnerability": "VCID-qtt6-8kf8-1fbt" }, { "vulnerability": "VCID-rarq-tdjt-hff3" }, { "vulnerability": "VCID-rnub-zmb6-5yhw" }, { "vulnerability": "VCID-tfhg-gzz2-7qc5" }, { "vulnerability": "VCID-uvca-5e2n-pqew" }, { "vulnerability": "VCID-xn7b-vz2e-6qdh" }, { "vulnerability": "VCID-xpfd-zdry-euh5" }, { "vulnerability": "VCID-zjct-yufk-jkdg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1" } ], "aliases": [ "CVE-2018-16859", "PYSEC-2018-60" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zcmk-4k97-kkd9" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.4" }