Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ansible@2.6
purl pkg:pypi/ansible@2.6
Tags Ghost
Next non-vulnerable version 12.0.0
Latest non-vulnerable version 12.2.0
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-wqm7-2ajr-6ue8
Aliases:
CVE-2018-10874
GHSA-3xvg-x47j-x75w
PYSEC-2018-81
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
2.6.1
Affected by 40 other vulnerabilities.
VCID-y91x-2rch-pkar
Aliases:
CVE-2018-10875
GHSA-fc4h-467w-46rh
PYSEC-2018-43
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
2.6.1
Affected by 40 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:56.270749+00:00 GHSA Importer Affected by VCID-wqm7-2ajr-6ue8 https://github.com/advisories/GHSA-3xvg-x47j-x75w 38.0.0
2026-04-01T12:47:51.103850+00:00 GitLab Importer Affected by VCID-y91x-2rch-pkar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/ansible/CVE-2018-10875.yml 38.0.0
2026-04-01T12:47:49.105453+00:00 GitLab Importer Affected by VCID-wqm7-2ajr-6ue8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/ansible/CVE-2018-10874.yml 38.0.0