Search for packages
| purl | pkg:deb/debian/ansible@2.6.1%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-wqm7-2ajr-6ue8 | In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result. |
CVE-2018-10874
GHSA-3xvg-x47j-x75w PYSEC-2018-81 |
| VCID-y91x-2rch-pkar | A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code. |
CVE-2018-10875
GHSA-fc4h-467w-46rh PYSEC-2018-43 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:07:27.783764+00:00 | Debian Importer | Fixing | VCID-wqm7-2ajr-6ue8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:57:27.103885+00:00 | Debian Importer | Fixing | VCID-y91x-2rch-pkar | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:17:25.381180+00:00 | Debian Importer | Fixing | VCID-wqm7-2ajr-6ue8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T06:40:09.701201+00:00 | Debian Importer | Fixing | VCID-y91x-2rch-pkar | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:13:48.322066+00:00 | Debian Importer | Fixing | VCID-wqm7-2ajr-6ue8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-02T17:06:33.709606+00:00 | Debian Importer | Fixing | VCID-y91x-2rch-pkar | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |