{"url":"http://public2.vulnerablecode.io/api/packages/11123?format=json","purl":"pkg:pypi/ansible@2.5.10","type":"pypi","namespace":"","name":"ansible","version":"2.5.10","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"3.0.0","latest_non_vulnerable_version":"12.2.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8085?format=json","vulnerability_id":"VCID-3jxq-kxnz-6bfh","summary":"A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20228","reference_id":"","reference_type":"","scores":[{"value":"0.00243","scoring_system":"epss","scoring_elements":"0.47749","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20228"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925002","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925002"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-5rrg-rr89-x9mv","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5rrg-rr89-x9mv"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c"},{"reference_url":"https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b"},{"reference_url":"https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120"},{"reference_url":"https://github.com/ansible/ansible/pull/73487","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73487"},{"reference_url":"https://github.com/ansible/ansible/pull/73492","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73492"},{"reference_url":"https://github.com/ansible/ansible/pull/73493","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73493"},{"reference_url":"https://github.com/ansible/ansible/pull/73494","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73494"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20228","reference_id":"CVE-2021-20228","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20228"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17018?format=json","purl":"pkg:pypi/ansible@2.8.19rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/13561?format=json","purl":"pkg:pypi/ansible@2.9.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.1"},{"url":"http://public2.vulnerablecode.io/api/packages/17037?format=json","purl":"pkg:pypi/ansible@2.9.18rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/17040?format=json","purl":"pkg:pypi/ansible@2.9.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19"},{"url":"http://public2.vulnerablecode.io/api/packages/78000?format=json","purl":"pkg:pypi/ansible@2.10.6rc1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.6rc1"}],"aliases":["CVE-2021-20228","GHSA-5rrg-rr89-x9mv","PYSEC-2021-1"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3jxq-kxnz-6bfh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/345485?format=json","vulnerability_id":"VCID-3v1a-j6eq-57dk","summary":"Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3744","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3744"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3789","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3789"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828"},{"reference_url":"https://github.com/ansible/ansible/pull/52133","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/pull/52133"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11956?format=json","purl":"pkg:pypi/ansible@2.5.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15"},{"url":"http://public2.vulnerablecode.io/api/packages/11957?format=json","purl":"pkg:pypi/ansible@2.6.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14"},{"url":"http://public2.vulnerablecode.io/api/packages/11289?format=json","purl":"pkg:pypi/ansible@2.7.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8"}],"aliases":["PYSEC-2019-75"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3v1a-j6eq-57dk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7858?format=json","vulnerability_id":"VCID-4331-d5yy-uybc","summary":"A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with \"umask 77 && mkdir -p <dir>\"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1733","reference_id":"","reference_type":"","scores":[{"value":"0.00027","scoring_system":"epss","scoring_elements":"0.08127","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1733"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-g4mq-6fp5-qwcf","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-g4mq-6fp5-qwcf"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2"},{"reference_url":"https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47"},{"reference_url":"https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e"},{"reference_url":"https://github.com/ansible/ansible/issues/67791","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67791"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1733","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1733"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://usn.ubuntu.com/USN-5315-1/","reference_id":"USN-USN-5315-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/USN-5315-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13773?format=json","purl":"pkg:pypi/ansible@2.8.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8"},{"url":"http://public2.vulnerablecode.io/api/packages/13873?format=json","purl":"pkg:pypi/ansible@2.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/13874?format=json","purl":"pkg:pypi/ansible@2.9.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7"}],"aliases":["CVE-2020-1733","GHSA-g4mq-6fp5-qwcf","PYSEC-2020-5"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4331-d5yy-uybc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/345520?format=json","vulnerability_id":"VCID-46yu-yqv4-1ugb","summary":"In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3201","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3201"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3202","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3203","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3203"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3207","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3207"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0756","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0756"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846"},{"reference_url":"https://github.com/ansible/ansible/pull/63366","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/pull/63366"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/13124?format=json","purl":"pkg:pypi/ansible@2.6.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20"},{"url":"http://public2.vulnerablecode.io/api/packages/11295?format=json","purl":"pkg:pypi/ansible@2.7.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14"},{"url":"http://public2.vulnerablecode.io/api/packages/13125?format=json","purl":"pkg:pypi/ansible@2.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6"}],"aliases":["PYSEC-2019-74"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-46yu-yqv4-1ugb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5842?format=json","vulnerability_id":"VCID-5mcc-gtrr-j3e4","summary":"information disclosure","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20178","reference_id":"","reference_type":"","scores":[{"value":"0.00028","scoring_system":"epss","scoring_elements":"0.0848","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20178"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914774","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914774"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-wv5p-gmmv-wh9v","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wv5p-gmmv-wh9v"},{"reference_url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes"},{"reference_url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,"},{"reference_url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C"},{"reference_url":"https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc"},{"reference_url":"https://github.com/ansible-collections/community.general/pull/1635","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/community.general/pull/1635"},{"reference_url":"https://github.com/ansible-collections/community.general/pull/1635,","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible-collections/community.general/pull/1635,"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20178","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"7.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20178"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753","reference_id":"985753","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753"},{"reference_url":"https://security.archlinux.org/ASA-202102-9","reference_id":"ASA-202102-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202102-9"},{"reference_url":"https://security.archlinux.org/AVG-1437","reference_id":"AVG-1437","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1437"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17038?format=json","purl":"pkg:pypi/ansible@2.9.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18"}],"aliases":["CVE-2021-20178","GHSA-wv5p-gmmv-wh9v","PYSEC-2021-106"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5mcc-gtrr-j3e4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7867?format=json","vulnerability_id":"VCID-6hdk-ywcn-4qe4","summary":"A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1753","reference_id":"","reference_type":"","scores":[{"value":"0.00051","scoring_system":"epss","scoring_elements":"0.16115","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1753"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753"},{"reference_url":"https://github.com/advisories/GHSA-86hp-cj9j-33vv","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-86hp-cj9j-33vv"},{"reference_url":"https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380"},{"reference_url":"https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a"},{"reference_url":"https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6"},{"reference_url":"https://github.com/ansible/ansible/pull/68195","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/68195"},{"reference_url":"https://github.com/ansible-collections/kubernetes","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/kubernetes"},{"reference_url":"https://github.com/ansible-collections/kubernetes/pull/51","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/kubernetes/pull/51"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1753","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1753"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/11299?format=json","purl":"pkg:pypi/ansible@2.7.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13873?format=json","purl":"pkg:pypi/ansible@2.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/14349?format=json","purl":"pkg:pypi/ansible@2.8.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/13874?format=json","purl":"pkg:pypi/ansible@2.9.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7"}],"aliases":["CVE-2020-1753","GHSA-86hp-cj9j-33vv","PYSEC-2020-210"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6hdk-ywcn-4qe4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7759?format=json","vulnerability_id":"VCID-6smx-ju23-8qes","summary":"In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3201","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3201"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3202","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3203","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3203"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3207","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3207"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0756","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2020:0756"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14846","reference_id":"","reference_type":"","scores":[{"value":"0.00117","scoring_system":"epss","scoring_elements":"0.30132","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14846"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4"},{"reference_url":"https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034"},{"reference_url":"https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b"},{"reference_url":"https://github.com/ansible/ansible/pull/63366","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/63366"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188","reference_id":"942188","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14846","reference_id":"CVE-2019-14846","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14846"},{"reference_url":"https://usn.ubuntu.com/7330-1/","reference_id":"USN-7330-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7330-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/13124?format=json","purl":"pkg:pypi/ansible@2.6.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20"},{"url":"http://public2.vulnerablecode.io/api/packages/11295?format=json","purl":"pkg:pypi/ansible@2.7.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14"},{"url":"http://public2.vulnerablecode.io/api/packages/13125?format=json","purl":"pkg:pypi/ansible@2.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/17022?format=json","purl":"pkg:pypi/ansible@2.9.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.0b1"}],"aliases":["CVE-2019-14846","GHSA-pm48-cvv2-29q5","PYSEC-2019-4"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6smx-ju23-8qes"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7855?format=json","vulnerability_id":"VCID-6swz-79ue-bbef","summary":"A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.","references":[{"reference_url":"https://access.redhat.com/errata/RHBA-2020:0547","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHBA-2020:0547"},{"reference_url":"https://access.redhat.com/errata/RHBA-2020:1539","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHBA-2020:1539"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1734","reference_id":"","reference_type":"","scores":[{"value":"0.00083","scoring_system":"epss","scoring_elements":"0.24234","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1734"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801804","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801804"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-h39q-95q5-9jfp","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-h39q-95q5-9jfp"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b"},{"reference_url":"https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0"},{"reference_url":"https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f"},{"reference_url":"https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0"},{"reference_url":"https://github.com/ansible/ansible/issues/67792","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67792"},{"reference_url":"https://github.com/ansible/ansible/issues/70159","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/70159"},{"reference_url":"https://github.com/ansible/ansible/pull/70596","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/70596"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2020-1734","reference_id":"CVE-2020-1734","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2020-1734"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1734","reference_id":"CVE-2020-1734","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1734"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/14352?format=json","purl":"pkg:pypi/ansible@2.8.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13"},{"url":"http://public2.vulnerablecode.io/api/packages/17008?format=json","purl":"pkg:pypi/ansible@2.9.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.11"},{"url":"http://public2.vulnerablecode.io/api/packages/17068?format=json","purl":"pkg:pypi/ansible@2.10.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1"}],"aliases":["CVE-2020-1734","GHSA-h39q-95q5-9jfp","PYSEC-2020-6"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6swz-79ue-bbef"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7654?format=json","vulnerability_id":"VCID-7f2g-zz9p-sufc","summary":"ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3835","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3835"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3836","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3836"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3837","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3837"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3838","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3838"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0564","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:0564"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0590","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:0590"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16876","reference_id":"","reference_type":"","scores":[{"value":"0.01236","scoring_system":"epss","scoring_elements":"0.79535","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16876"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da"},{"reference_url":"https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7"},{"reference_url":"https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099"},{"reference_url":"https://github.com/ansible/ansible/issues/51318","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/51318"},{"reference_url":"https://github.com/ansible/ansible/pull/49569","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/49569"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml"},{"reference_url":"https://usn.ubuntu.com/4072-1","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4072-1"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"},{"reference_url":"https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225"},{"reference_url":"https://www.debian.org/security/2019/dsa-4396","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2019/dsa-4396"},{"reference_url":"http://www.securityfocus.com/bid/106225","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/106225"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102","reference_id":"916102","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16876","reference_id":"CVE-2018-16876","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16876"},{"reference_url":"https://github.com/advisories/GHSA-j569-fghw-f9rx","reference_id":"GHSA-j569-fghw-f9rx","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j569-fghw-f9rx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11460?format=json","purl":"pkg:pypi/ansible@2.5.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.14"},{"url":"http://public2.vulnerablecode.io/api/packages/11461?format=json","purl":"pkg:pypi/ansible@2.6.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.11"},{"url":"http://public2.vulnerablecode.io/api/packages/11286?format=json","purl":"pkg:pypi/ansible@2.7.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.5"}],"aliases":["CVE-2018-16876","GHSA-j569-fghw-f9rx","PYSEC-2019-141"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7f2g-zz9p-sufc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7628?format=json","vulnerability_id":"VCID-826d-vdw1-dbaj","summary":"Ansible \"User\" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3460","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3460"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3461","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3461"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3462","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3462"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3463","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3463"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3505","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3505"},{"reference_url":"https://access.redhat.com/security/cve/cve-2018-16837","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/cve-2018-16837"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16837","reference_id":"","reference_type":"","scores":[{"value":"0.00024","scoring_system":"epss","scoring_elements":"0.07112","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16837"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138"},{"reference_url":"https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511"},{"reference_url":"https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267"},{"reference_url":"https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1"},{"reference_url":"https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0"},{"reference_url":"https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4"},{"reference_url":"https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf"},{"reference_url":"https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23"},{"reference_url":"https://github.com/ansible/ansible/pull/47436","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/47436"},{"reference_url":"https://github.com/ansible/ansible/pull/47445","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/47445"},{"reference_url":"https://github.com/ansible/ansible/pull/47486","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/47486"},{"reference_url":"https://github.com/ansible/ansible/pull/47487","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/47487"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html"},{"reference_url":"https://usn.ubuntu.com/4072-1","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4072-1"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"},{"reference_url":"https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700"},{"reference_url":"https://www.debian.org/security/2019/dsa-4396","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2019/dsa-4396"},{"reference_url":"http://www.securityfocus.com/bid/105700","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/105700"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297","reference_id":"912297","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16837","reference_id":"CVE-2018-16837","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16837"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11132?format=json","purl":"pkg:pypi/ansible@2.5.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.11"},{"url":"http://public2.vulnerablecode.io/api/packages/11131?format=json","purl":"pkg:pypi/ansible@2.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.7"},{"url":"http://public2.vulnerablecode.io/api/packages/11130?format=json","purl":"pkg:pypi/ansible@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.1"}],"aliases":["CVE-2018-16837","GHSA-hwrm-63v2-42g4","PYSEC-2018-44"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-826d-vdw1-dbaj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8103?format=json","vulnerability_id":"VCID-95kg-bk3s-g7gx","summary":"A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-10729","reference_id":"","reference_type":"","scores":[{"value":"0.00064","scoring_system":"epss","scoring_elements":"0.20041","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-10729"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831089","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831089"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-r6h7-5pq2-j77h","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-r6h7-5pq2-j77h"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst"},{"reference_url":"https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9"},{"reference_url":"https://github.com/ansible/ansible/issues/34144","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/34144"},{"reference_url":"https://github.com/ansible/ansible/pull/67429","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/67429"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10729","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10729"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"5.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://usn.ubuntu.com/7330-1/","reference_id":"USN-7330-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7330-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"}],"aliases":["CVE-2020-10729","GHSA-r6h7-5pq2-j77h","PYSEC-2021-105"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-95kg-bk3s-g7gx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7942?format=json","vulnerability_id":"VCID-axds-bd49-fbdj","summary":"A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14904","reference_id":"","reference_type":"","scores":[{"value":"0.00037","scoring_system":"epss","scoring_elements":"0.11344","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14904"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776944","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776944"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-gwr8-5j83-483c","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gwr8-5j83-483c"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69"},{"reference_url":"https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907"},{"reference_url":"https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8"},{"reference_url":"https://github.com/ansible/ansible/pull/65686","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/65686"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14904","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14904"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"7.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"},{"value":"8.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://usn.ubuntu.com/7330-1/","reference_id":"USN-7330-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7330-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11296?format=json","purl":"pkg:pypi/ansible@2.7.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15"},{"url":"http://public2.vulnerablecode.io/api/packages/11297?format=json","purl":"pkg:pypi/ansible@2.7.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.16"},{"url":"http://public2.vulnerablecode.io/api/packages/13560?format=json","purl":"pkg:pypi/ansible@2.8.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7"},{"url":"http://public2.vulnerablecode.io/api/packages/13773?format=json","purl":"pkg:pypi/ansible@2.8.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8"},{"url":"http://public2.vulnerablecode.io/api/packages/13774?format=json","purl":"pkg:pypi/ansible@2.9.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2"},{"url":"http://public2.vulnerablecode.io/api/packages/13775?format=json","purl":"pkg:pypi/ansible@2.9.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.3"}],"aliases":["CVE-2019-14904","GHSA-gwr8-5j83-483c","PYSEC-2020-161"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-axds-bd49-fbdj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7871?format=json","vulnerability_id":"VCID-b423-t4kx-eqbq","summary":"A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1735","reference_id":"","reference_type":"","scores":[{"value":"0.00138","scoring_system":"epss","scoring_elements":"0.33455","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1735"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-gfr2-qpxh-qj9m","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gfr2-qpxh-qj9m"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7"},{"reference_url":"https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1"},{"reference_url":"https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a"},{"reference_url":"https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d"},{"reference_url":"https://github.com/ansible/ansible/issues/67793","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67793"},{"reference_url":"https://github.com/ansible/ansible/pull/69023","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/69023"},{"reference_url":"https://github.com/ansible/ansible/pull/69024","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/69024"},{"reference_url":"https://github.com/ansible/ansible/pull/69025","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/69025"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1735","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1735"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"},{"value":"4.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/11299?format=json","purl":"pkg:pypi/ansible@2.7.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/14349?format=json","purl":"pkg:pypi/ansible@2.8.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/14350?format=json","purl":"pkg:pypi/ansible@2.9.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.8"}],"aliases":["CVE-2020-1735","GHSA-gfr2-qpxh-qj9m","PYSEC-2020-7"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b423-t4kx-eqbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7950?format=json","vulnerability_id":"VCID-b8cv-v25q-1kh3","summary":"An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-14330","reference_id":"","reference_type":"","scores":[{"value":"0.00218","scoring_system":"epss","scoring_elements":"0.44392","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-14330"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-785x-qw4v-6872","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-785x-qw4v-6872"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e"},{"reference_url":"https://github.com/ansible/ansible/issues/68400","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/68400"},{"reference_url":"https://github.com/ansible/ansible/pull/69653","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/69653"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14330","reference_id":"CVE-2020-14330","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14330"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17010?format=json","purl":"pkg:pypi/ansible@2.9.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.12"},{"url":"http://public2.vulnerablecode.io/api/packages/17069?format=json","purl":"pkg:pypi/ansible@2.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0"}],"aliases":["CVE-2020-14330","GHSA-785x-qw4v-6872","PYSEC-2020-3"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b8cv-v25q-1kh3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7686?format=json","vulnerability_id":"VCID-bmq3-uckn-tfhk","summary":"Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"},{"reference_url":"http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3744","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3744"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3789","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3789"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-3828","reference_id":"","reference_type":"","scores":[{"value":"0.0003","scoring_system":"epss","scoring_elements":"0.09087","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-3828"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-74vq-h4q8-x6jv","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-74vq-h4q8-x6jv"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110"},{"reference_url":"https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333"},{"reference_url":"https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93"},{"reference_url":"https://github.com/ansible/ansible/pull/52133","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/52133"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml"},{"reference_url":"https://usn.ubuntu.com/4072-1","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4072-1"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537","reference_id":"922537","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3828","reference_id":"CVE-2019-3828","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3828"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11956?format=json","purl":"pkg:pypi/ansible@2.5.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15"},{"url":"http://public2.vulnerablecode.io/api/packages/11957?format=json","purl":"pkg:pypi/ansible@2.6.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14"},{"url":"http://public2.vulnerablecode.io/api/packages/11289?format=json","purl":"pkg:pypi/ansible@2.7.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8"}],"aliases":["CVE-2019-3828","GHSA-74vq-h4q8-x6jv","PYSEC-2019-5"],"risk_score":1.4,"exploitability":"0.5","weighted_severity":"2.7","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bmq3-uckn-tfhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7857?format=json","vulnerability_id":"VCID-brft-snn6-guc8","summary":"A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1737","reference_id":"","reference_type":"","scores":[{"value":"0.00155","scoring_system":"epss","scoring_elements":"0.35898","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1737"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-893h-35v4-mxqx","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-893h-35v4-mxqx"},{"reference_url":"https://github.com/ansible/ansible/issues/67795","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67795"},{"reference_url":"https://github.com/ansible/ansible/pull/67799","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/67799"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml"},{"reference_url":"https://github.com/samdoran/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/samdoran/ansible"},{"reference_url":"https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d"},{"reference_url":"https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676"},{"reference_url":"https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1737","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1737"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"}],"aliases":["CVE-2020-1737","GHSA-893h-35v4-mxqx","PYSEC-2020-9"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-brft-snn6-guc8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5428?format=json","vulnerability_id":"VCID-enwa-2cfn-5uab","summary":"arbitrary command execution","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3583","reference_id":"","reference_type":"","scores":[{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51217","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3583"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968412","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968412"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-2pfh-q76x-gwvm","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-2pfh-q76x-gwvm"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e"},{"reference_url":"https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847"},{"reference_url":"https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1"},{"reference_url":"https://github.com/ansible/ansible/pull/74960","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/74960"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html"},{"reference_url":"https://security.archlinux.org/AVG-2260","reference_id":"AVG-2260","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2260"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3583","reference_id":"CVE-2021-3583","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3583"},{"reference_url":"https://usn.ubuntu.com/USN-5315-1/","reference_id":"USN-USN-5315-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/USN-5315-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17047?format=json","purl":"pkg:pypi/ansible@2.9.23rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/17048?format=json","purl":"pkg:pypi/ansible@2.9.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23"},{"url":"http://public2.vulnerablecode.io/api/packages/204852?format=json","purl":"pkg:pypi/ansible@2.10.11rc1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.11rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/204854?format=json","purl":"pkg:pypi/ansible@2.11.2rc1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.11.2rc1"}],"aliases":["CVE-2021-3583","GHSA-2pfh-q76x-gwvm","PYSEC-2021-358"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-enwa-2cfn-5uab"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7764?format=json","vulnerability_id":"VCID-gnq4-v5a7-m3ew","summary":"A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3201","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3201"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3202","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3203","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3203"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3207","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3207"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0756","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2020:0756"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14858","reference_id":"","reference_type":"","scores":[{"value":"0.00041","scoring_system":"epss","scoring_elements":"0.1264","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14858"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/0fd656e9964a91f2e8b1e9bbf78c74661ab9d37b","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/0fd656e9964a91f2e8b1e9bbf78c74661ab9d37b"},{"reference_url":"https://github.com/ansible/ansible/commit/3dfb8e81bb5f776a6b00c7a90dd087e85b71f8bb","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/3dfb8e81bb5f776a6b00c7a90dd087e85b71f8bb"},{"reference_url":"https://github.com/ansible/ansible/commit/87f8d77d70476454f7fe2381bd363a329ce4266c","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/87f8d77d70476454f7fe2381bd363a329ce4266c"},{"reference_url":"https://github.com/ansible/ansible/commit/f610ed3a4eb87eb557200606279796921fa9b722","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/f610ed3a4eb87eb557200606279796921fa9b722"},{"reference_url":"https://github.com/ansible/ansible/pull/63405","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/63405"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-171.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-171.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14858","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14858"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942332","reference_id":"942332","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942332"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/13124?format=json","purl":"pkg:pypi/ansible@2.6.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20"},{"url":"http://public2.vulnerablecode.io/api/packages/11295?format=json","purl":"pkg:pypi/ansible@2.7.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14"},{"url":"http://public2.vulnerablecode.io/api/packages/11307?format=json","purl":"pkg:pypi/ansible@2.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-mk3k-n9wn-q3ct"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-sdv2-h8d8-9ydj"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/13125?format=json","purl":"pkg:pypi/ansible@2.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/17026?format=json","purl":"pkg:pypi/ansible@2.9.0rc4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.0rc4"}],"aliases":["CVE-2019-14858","GHSA-h653-95qw-h2mp","PYSEC-2019-171"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-gnq4-v5a7-m3ew"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7870?format=json","vulnerability_id":"VCID-hyr1-b223-bkef","summary":"A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1736","reference_id":"","reference_type":"","scores":[{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18673","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1736"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-x7jh-595q-wq82","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-x7jh-595q-wq82"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/issues/67794","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67794"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663","reference_id":"966663","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1736","reference_id":"CVE-2020-1736","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"4.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1736"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"}],"aliases":["CVE-2020-1736","GHSA-x7jh-595q-wq82","PYSEC-2020-8"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hyr1-b223-bkef"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5516?format=json","vulnerability_id":"VCID-kgjy-7kdy-c3cg","summary":"information disclosure","references":[{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956477","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956477"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://security.archlinux.org/AVG-2056","reference_id":"AVG-2056","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2056"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3533","reference_id":"CVE-2021-3533","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3533"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/21283?format=json","purl":"pkg:pypi/ansible@3.0.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0"}],"aliases":["CVE-2021-3533","PYSEC-2021-126"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kgjy-7kdy-c3cg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7985?format=json","vulnerability_id":"VCID-m87b-eb5y-8ydf","summary":"A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-25635","reference_id":"","reference_type":"","scores":[{"value":"0.0008","scoring_system":"epss","scoring_elements":"0.236","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-25635"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible-collections/community.aws/issues/222","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/community.aws/issues/222"},{"reference_url":"https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25635","reference_id":"CVE-2020-25635","reference_type":"","scores":[{"value":"5.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25635"},{"reference_url":"https://github.com/advisories/GHSA-f556-49jc-4rvc","reference_id":"GHSA-f556-49jc-4rvc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-f556-49jc-4rvc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17303?format=json","purl":"pkg:pypi/ansible@2.10.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-sy8p-asn6-p3d3"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1"}],"aliases":["CVE-2020-25635","GHSA-f556-49jc-4rvc","PYSEC-2020-220"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-m87b-eb5y-8ydf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7868?format=json","vulnerability_id":"VCID-n2b8-e8fa-2ue1","summary":"A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes \"ansible-vault edit\", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1740","reference_id":"","reference_type":"","scores":[{"value":"0.00145","scoring_system":"epss","scoring_elements":"0.34646","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1740"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-vcg8-98q8-g7mj","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vcg8-98q8-g7mj"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b"},{"reference_url":"https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73"},{"reference_url":"https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc"},{"reference_url":"https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef"},{"reference_url":"https://github.com/ansible/ansible/issues/67798","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67798"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1740","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1740"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"5.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13873?format=json","purl":"pkg:pypi/ansible@2.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/13874?format=json","purl":"pkg:pypi/ansible@2.9.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7"}],"aliases":["CVE-2020-1740","GHSA-vcg8-98q8-g7mj","PYSEC-2020-12"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n2b8-e8fa-2ue1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/345547?format=json","vulnerability_id":"VCID-p6cz-c9ah-c7cp","summary":"A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.","references":[{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776944","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776944"},{"reference_url":"https://github.com/ansible/ansible/pull/65686","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/pull/65686"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11296?format=json","purl":"pkg:pypi/ansible@2.7.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15"},{"url":"http://public2.vulnerablecode.io/api/packages/13560?format=json","purl":"pkg:pypi/ansible@2.8.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7"},{"url":"http://public2.vulnerablecode.io/api/packages/13774?format=json","purl":"pkg:pypi/ansible@2.9.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2"}],"aliases":["PYSEC-2020-180"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p6cz-c9ah-c7cp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/1054?format=json","vulnerability_id":"VCID-qtt6-8kf8-1fbt","summary":"information disclosure","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3871","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2021:3871"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3872","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2021:3872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:3874","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2021:3874"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4703","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2021:4703"},{"reference_url":"https://access.redhat.com/errata/RHSA-2021:4750","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2021:4750"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3620","reference_id":"","reference_type":"","scores":[{"value":"0.0029","scoring_system":"epss","scoring_elements":"0.52692","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3620"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975767","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/"}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975767"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-4r65-35qq-ch8j","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4r65-35qq-ch8j"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/"}],"url":"https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes"},{"reference_url":"https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/"}],"url":"https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html"},{"reference_url":"https://security.archlinux.org/AVG-1941","reference_id":"AVG-1941","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1941"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2021-3620","reference_id":"CVE-2021-3620","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2021-3620"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3620","reference_id":"CVE-2021-3620","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3620"},{"reference_url":"https://usn.ubuntu.com/USN-5315-1/","reference_id":"USN-USN-5315-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/USN-5315-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17056?format=json","purl":"pkg:pypi/ansible@2.9.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.27"}],"aliases":["CVE-2021-3620","GHSA-4r65-35qq-ch8j","PYSEC-2022-164"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qtt6-8kf8-1fbt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7869?format=json","vulnerability_id":"VCID-rarq-tdjt-hff3","summary":"A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1738","reference_id":"","reference_type":"","scores":[{"value":"0.00215","scoring_system":"epss","scoring_elements":"0.44079","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1738"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-f85h-23mf-2fwh","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-f85h-23mf-2fwh"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/issues/67796","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67796"},{"reference_url":"https://github.com/ansible/ansible/pull/67808","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/67808"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml"},{"reference_url":"https://security.gentoo.org/glsa/202006-11","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.gentoo.org/glsa/202006-11"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1738","reference_id":"CVE-2020-1738","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L"},{"value":"1.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1738"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"}],"aliases":["CVE-2020-1738","GHSA-f85h-23mf-2fwh","PYSEC-2020-10"],"risk_score":1.4,"exploitability":"0.5","weighted_severity":"2.7","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rarq-tdjt-hff3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7863?format=json","vulnerability_id":"VCID-rnub-zmb6-5yhw","summary":"A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument \"password\" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1739","reference_id":"","reference_type":"","scores":[{"value":"0.00046","scoring_system":"epss","scoring_elements":"0.1474","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1739"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-923p-fr2c-g5m2","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-923p-fr2c-g5m2"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237"},{"reference_url":"https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f"},{"reference_url":"https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4"},{"reference_url":"https://github.com/ansible/ansible/issues/67797","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/67797"},{"reference_url":"https://github.com/ansible/ansible/pull/68911","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/68911"},{"reference_url":"https://github.com/ansible/ansible/pull/68912","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/68912"},{"reference_url":"https://github.com/ansible/ansible/pull/68913","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/68913"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1739","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1739"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"2.4","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://usn.ubuntu.com/7330-1/","reference_id":"USN-7330-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7330-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11298?format=json","purl":"pkg:pypi/ansible@2.7.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17"},{"url":"http://public2.vulnerablecode.io/api/packages/13778?format=json","purl":"pkg:pypi/ansible@2.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/13873?format=json","purl":"pkg:pypi/ansible@2.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/13779?format=json","purl":"pkg:pypi/ansible@2.9.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-ydka-2etb-hue9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6"},{"url":"http://public2.vulnerablecode.io/api/packages/13874?format=json","purl":"pkg:pypi/ansible@2.9.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7"}],"aliases":["CVE-2020-1739","GHSA-923p-fr2c-g5m2","PYSEC-2020-11"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rnub-zmb6-5yhw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5840?format=json","vulnerability_id":"VCID-uvca-5e2n-pqew","summary":"information disclosure","references":[{"reference_url":"https://access.redhat.com/security/cve/cve-2021-20191","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/cve-2021-20191"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20191","reference_id":"","reference_type":"","scores":[{"value":"0.00024","scoring_system":"epss","scoring_elements":"0.07158","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-20191"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916813","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916813"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-8f4m-hccc-8qph","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8f4m-hccc-8qph"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0"},{"reference_url":"https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc"},{"reference_url":"https://github.com/ansible/ansible/pull/73488","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73488"},{"reference_url":"https://github.com/ansible/ansible/pull/73489","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/73489"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20191","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20191"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753","reference_id":"985753","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753"},{"reference_url":"https://security.archlinux.org/ASA-202102-9","reference_id":"ASA-202102-9","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-202102-9"},{"reference_url":"https://security.archlinux.org/AVG-1437","reference_id":"AVG-1437","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-1437"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/17018?format=json","purl":"pkg:pypi/ansible@2.8.19rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/17019?format=json","purl":"pkg:pypi/ansible@2.8.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19"},{"url":"http://public2.vulnerablecode.io/api/packages/17037?format=json","purl":"pkg:pypi/ansible@2.9.18rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/17038?format=json","purl":"pkg:pypi/ansible@2.9.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18"},{"url":"http://public2.vulnerablecode.io/api/packages/20863?format=json","purl":"pkg:pypi/ansible@2.10.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-kgjy-7kdy-c3cg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.7"}],"aliases":["CVE-2021-20191","GHSA-8f4m-hccc-8qph","PYSEC-2021-124"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uvca-5e2n-pqew"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/345504?format=json","vulnerability_id":"VCID-xk7s-y611-mffc","summary":"A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3744","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3744"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3789","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:3789"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156"},{"reference_url":"https://github.com/ansible/ansible/pull/57188","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/pull/57188"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/12698?format=json","purl":"pkg:pypi/ansible@2.6.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18"},{"url":"http://public2.vulnerablecode.io/api/packages/11293?format=json","purl":"pkg:pypi/ansible@2.7.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12"},{"url":"http://public2.vulnerablecode.io/api/packages/12699?format=json","purl":"pkg:pypi/ansible@2.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-mk3k-n9wn-q3ct"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-sdv2-h8d8-9ydj"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2"}],"aliases":["PYSEC-2019-72"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xk7s-y611-mffc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7736?format=json","vulnerability_id":"VCID-xn7b-vz2e-6qdh","summary":"A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3744","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3744"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:3789","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:3789"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-10156","reference_id":"","reference_type":"","scores":[{"value":"0.00589","scoring_system":"epss","scoring_elements":"0.69494","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-10156"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-grgm-pph5-j5h7","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-grgm-pph5-j5h7"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922"},{"reference_url":"https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375"},{"reference_url":"https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a"},{"reference_url":"https://github.com/ansible/ansible/pull/57188","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/57188"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html"},{"reference_url":"https://www.debian.org/security/2021/dsa-4950","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2021/dsa-4950"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065","reference_id":"930065","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10156","reference_id":"CVE-2019-10156","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10156"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/12698?format=json","purl":"pkg:pypi/ansible@2.6.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18"},{"url":"http://public2.vulnerablecode.io/api/packages/11293?format=json","purl":"pkg:pypi/ansible@2.7.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12"},{"url":"http://public2.vulnerablecode.io/api/packages/12699?format=json","purl":"pkg:pypi/ansible@2.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-mk3k-n9wn-q3ct"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-sdv2-h8d8-9ydj"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2"}],"aliases":["CVE-2019-10156","GHSA-grgm-pph5-j5h7","PYSEC-2019-2"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xn7b-vz2e-6qdh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7641?format=json","vulnerability_id":"VCID-zcmk-4k97-kkd9","summary":"Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3770","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3770"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3771","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3771"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3772","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3772"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3773","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:3773"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16859","reference_id":"","reference_type":"","scores":[{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25744","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-16859"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859"},{"reference_url":"https://cwe.mitre.org/data/definitions/200.html","reference_id":"","reference_type":"","scores":[],"url":"https://cwe.mitre.org/data/definitions/200.html"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.2","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst"},{"reference_url":"https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f"},{"reference_url":"https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87"},{"reference_url":"https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b"},{"reference_url":"https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c"},{"reference_url":"https://github.com/ansible/ansible/pull/49142","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/49142"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16859","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16859"},{"reference_url":"https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004","reference_id":"","reference_type":"","scores":[{"value":"4.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"value":"6.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004"},{"reference_url":"http://www.securityfocus.com/bid/106004","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/106004"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/11281?format=json","purl":"pkg:pypi/ansible@2.5.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.12"},{"url":"http://public2.vulnerablecode.io/api/packages/11308?format=json","purl":"pkg:pypi/ansible@2.5.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.13"},{"url":"http://public2.vulnerablecode.io/api/packages/11283?format=json","purl":"pkg:pypi/ansible@2.6.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.9"},{"url":"http://public2.vulnerablecode.io/api/packages/11309?format=json","purl":"pkg:pypi/ansible@2.6.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.10"},{"url":"http://public2.vulnerablecode.io/api/packages/11285?format=json","purl":"pkg:pypi/ansible@2.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zcmk-4k97-kkd9"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/11306?format=json","purl":"pkg:pypi/ansible@2.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/11307?format=json","purl":"pkg:pypi/ansible@2.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-4tfv-snmv-bbax"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-7d8z-g99x-7qh2"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-aq21-sp74-17gk"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-bvsa-kz7r-zyea"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-mk3k-n9wn-q3ct"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-sdv2-h8d8-9ydj"},{"vulnerability":"VCID-tfhg-gzz2-7qc5"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-vctt-ev3n-zkf8"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-xpfd-zdry-euh5"},{"vulnerability":"VCID-zjct-yufk-jkdg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1"}],"aliases":["CVE-2018-16859","GHSA-v735-2pp6-h86r","PYSEC-2018-60"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zcmk-4k97-kkd9"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.10"}