Search for packages
| purl | pkg:pypi/ansible@0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-d3nw-dz41-wfg2
Aliases: CVE-2016-8628 GHSA-jg4f-jqm5-4mgq PYSEC-2018-38 |
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as. |
Affected by 0 other vulnerabilities. Affected by 33 other vulnerabilities. |
|
VCID-qbws-64b9-83fc
Aliases: CVE-2018-10874 GHSA-3xvg-x47j-x75w PYSEC-2018-81 |
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result. |
Affected by 36 other vulnerabilities. Affected by 29 other vulnerabilities. Affected by 31 other vulnerabilities. Affected by 32 other vulnerabilities. |
|
VCID-rarq-tdjt-hff3
Aliases: CVE-2020-1738 GHSA-f85h-23mf-2fwh PYSEC-2020-10 |
A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable. |
Affected by 13 other vulnerabilities. Affected by 15 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-rgk8-k53p-gkft
Aliases: CVE-2016-8614 GHSA-cmwx-9m2h-x7v4 PYSEC-2018-37 |
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key. |
Affected by 0 other vulnerabilities. Affected by 33 other vulnerabilities. |
|
VCID-vtec-237j-1ua2
Aliases: CVE-2016-8647 GHSA-x4cm-m36h-c6qj PYSEC-2018-58 |
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed. |
Affected by 31 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-31T00:56:44.803549+00:00 | GHSA Importer | Affected by | VCID-qbws-64b9-83fc | https://github.com/advisories/GHSA-3xvg-x47j-x75w | 38.6.0 |
| 2026-05-31T00:54:44.151050+00:00 | GHSA Importer | Affected by | VCID-rarq-tdjt-hff3 | https://github.com/advisories/GHSA-f85h-23mf-2fwh | 38.6.0 |
| 2026-05-31T00:50:34.407058+00:00 | GHSA Importer | Affected by | VCID-vtec-237j-1ua2 | https://github.com/advisories/GHSA-x4cm-m36h-c6qj | 38.6.0 |
| 2026-05-31T00:50:34.358244+00:00 | GHSA Importer | Affected by | VCID-rgk8-k53p-gkft | https://github.com/advisories/GHSA-cmwx-9m2h-x7v4 | 38.6.0 |
| 2026-05-31T00:50:34.193098+00:00 | GHSA Importer | Affected by | VCID-d3nw-dz41-wfg2 | https://github.com/advisories/GHSA-jg4f-jqm5-4mgq | 38.6.0 |