Search for packages
| purl | pkg:pypi/ansible@4.2.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qbdk-hxhg-wbh4
Aliases: CVE-2025-14010 GHSA-8ggh-xwr9-3373 |
Ansible Community General Collection is vulnerable to exposure of sensitive information A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ujbp-cc1r-wfe9
Aliases: CVE-2023-5115 GHSA-jpvw-p8pr-9g2x |
Ansible symlink attack vulnerability An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||