Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ansible@2.9.13-1?arch=el8ae
purl pkg:rpm/redhat/ansible@2.9.13-1?arch=el8ae
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.2
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-jrxz-b168-7ug4
Aliases:
CVE-2020-14365
GHSA-m429-fhmv-c6q2
PYSEC-2020-209
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:04:52.806709+00:00 RedHat Importer Affected by VCID-jrxz-b168-7ug4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14365.json 38.0.0