Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/47459?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/47459?format=api", "purl": "pkg:pypi/ansible@1.9.1", "type": "pypi", "namespace": "", "name": "ansible", "version": "1.9.1", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2.2.0", "latest_non_vulnerable_version": "12.2.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7978?format=api", "vulnerability_id": "VCID-1ggg-7w5s-r3g2", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1733.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1733.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00027", "scoring_system": "epss", "scoring_elements": "0.0804", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1733" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-g4mq-6fp5-qwcf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g4mq-6fp5-qwcf" }, { "reference_url": "https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2" }, { "reference_url": "https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47" }, { "reference_url": "https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e" }, { "reference_url": "https://github.com/ansible/ansible/issues/67791", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67791" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1733" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801735", "reference_id": "1801735", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801735" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1543", "reference_id": "RHSA-2020:1543", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1543" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1544", "reference_id": "RHSA-2020:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1544" }, { "reference_url": "https://usn.ubuntu.com/USN-5315-1/", "reference_id": "USN-USN-5315-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-5315-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56657?format=api", "purl": "pkg:pypi/ansible@2.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56965?format=api", "purl": "pkg:pypi/ansible@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/56967?format=api", "purl": "pkg:pypi/ansible@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7" } ], "aliases": [ "CVE-2020-1733", "GHSA-g4mq-6fp5-qwcf", "PYSEC-2020-5" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ggg-7w5s-r3g2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/16147?format=api", "vulnerability_id": "VCID-1u93-v71q-pbht", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5701", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2023:5701" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5758", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2023:5758" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5115.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5115.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5115", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0066", "scoring_system": "epss", "scoring_elements": "0.71572", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5115" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2233810", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2233810" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5115", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5115" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/1e930684bc0a76ec3d094cd326738ad26416541c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/1e930684bc0a76ec3d094cd326738ad26416541c" }, { "reference_url": "https://github.com/ansible-community/ansible-build-data/blob/16d36538b96c65d9e0e28d89781361b69857ac0e/8/CHANGELOG-v8.rst#L221", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-community/ansible-build-data/blob/16d36538b96c65d9e0e28d89781361b69857ac0e/8/CHANGELOG-v8.rst#L221" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053693", "reference_id": "1053693", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053693" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-5115", "reference_id": "CVE-2023-5115", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-5115" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5115", "reference_id": "CVE-2023-5115", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5115" }, { "reference_url": "https://github.com/advisories/GHSA-jpvw-p8pr-9g2x", "reference_id": "GHSA-jpvw-p8pr-9g2x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jpvw-p8pr-9g2x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/28215?format=api", "purl": "pkg:pypi/ansible@8.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-mmsh-dxa8-xqhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@8.5.0" } ], "aliases": [ "CVE-2023-5115", "GHSA-jpvw-p8pr-9g2x" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1u93-v71q-pbht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7980?format=api", "vulnerability_id": "VCID-2atd-9e9a-vbgk", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1735.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1735.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33523", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1735" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-gfr2-qpxh-qj9m", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gfr2-qpxh-qj9m" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7" }, { "reference_url": "https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1" }, { "reference_url": "https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a" }, { "reference_url": "https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d" }, { "reference_url": "https://github.com/ansible/ansible/issues/67793", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67793" }, { "reference_url": "https://github.com/ansible/ansible/pull/69023", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/69023" }, { "reference_url": "https://github.com/ansible/ansible/pull/69024", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/69024" }, { "reference_url": "https://github.com/ansible/ansible/pull/69025", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/69025" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1735" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802085", "reference_id": "1802085", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802085" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" }, { "value": "4.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1543", "reference_id": "RHSA-2020:1543", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1543" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1544", "reference_id": "RHSA-2020:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1544" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/52742?format=api", "purl": "pkg:pypi/ansible@2.7.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/57699?format=api", "purl": "pkg:pypi/ansible@2.8.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/57701?format=api", "purl": "pkg:pypi/ansible@2.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.8" } ], "aliases": [ "CVE-2020-1735", "GHSA-gfr2-qpxh-qj9m", "PYSEC-2020-7" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2atd-9e9a-vbgk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5000?format=api", "vulnerability_id": "VCID-2ggn-yasq-5qg6", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3770", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3770" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3771", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3771" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3772", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3772" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3773", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3773" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16859.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16859.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25754", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16859" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859" }, { "reference_url": "https://cwe.mitre.org/data/definitions/200.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cwe.mitre.org/data/definitions/200.html" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-v735-2pp6-h86r", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-v735-2pp6-h86r" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst" }, { "reference_url": "https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f" }, { "reference_url": "https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87" }, { "reference_url": "https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b" }, { "reference_url": "https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c" }, { "reference_url": "https://github.com/ansible/ansible/pull/49142", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/49142" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16859", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16859" }, { "reference_url": "https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004" }, { "reference_url": "http://www.securityfocus.com/bid/106004", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/106004" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649607", "reference_id": "1649607", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649607" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52727?format=api", "purl": "pkg:pypi/ansible@2.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/52760?format=api", "purl": "pkg:pypi/ansible@2.5.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52730?format=api", "purl": "pkg:pypi/ansible@2.6.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/52761?format=api", "purl": "pkg:pypi/ansible@2.6.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/52732?format=api", "purl": "pkg:pypi/ansible@2.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/52758?format=api", "purl": "pkg:pypi/ansible@2.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/52759?format=api", "purl": "pkg:pypi/ansible@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-4wfp-1gza-cya3" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1" } ], "aliases": [ "CVE-2018-16859", "GHSA-v735-2pp6-h86r", "PYSEC-2018-60" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2ggn-yasq-5qg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4434?format=api", "vulnerability_id": "VCID-2mn4-wz9d-b7cu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHBA-2018:3788", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHBA-2018:3788" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2150", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2151", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2152", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2152" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2166", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2166" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2321", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2321" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2585", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:2585" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0054", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:0054" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10874.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10874.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10874", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.16103", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-10874" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596528", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596528" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10874", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10874" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7" }, { "reference_url": "https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e" }, { "reference_url": "https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb" }, { "reference_url": "https://github.com/ansible/ansible/pull/42067", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/42067" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396" }, { "reference_url": "http://www.securitytracker.com/id/1041396", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1041396" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2018-10874", "reference_id": "CVE-2018-10874", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2018-10874" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10874", "reference_id": "CVE-2018-10874", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10874" }, { "reference_url": "https://github.com/advisories/GHSA-3xvg-x47j-x75w", "reference_id": "GHSA-3xvg-x47j-x75w", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3xvg-x47j-x75w" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/47816?format=api", "purl": "pkg:pypi/ansible@2.0.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.0.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/21131?format=api", "purl": "pkg:pypi/ansible@2.4.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-79pk-c232-p3by" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/21146?format=api", "purl": "pkg:pypi/ansible@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-79pk-c232-p3by" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/21154?format=api", "purl": "pkg:pypi/ansible@2.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1" } ], "aliases": [ "CVE-2018-10874", "GHSA-3xvg-x47j-x75w", "PYSEC-2018-81" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2mn4-wz9d-b7cu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8927?format=api", "vulnerability_id": "VCID-3d73-q2yz-sqg7", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20191.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20191.json" }, { "reference_url": "https://access.redhat.com/security/cve/cve-2021-20191", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/cve-2021-20191" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20191", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00024", "scoring_system": "epss", "scoring_elements": "0.07061", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20191" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1916813", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1916813" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20191", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20191" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-8f4m-hccc-8qph", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8f4m-hccc-8qph" }, { "reference_url": "https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0" }, { "reference_url": "https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc" }, { "reference_url": "https://github.com/ansible/ansible/pull/73488", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73488" }, { "reference_url": "https://github.com/ansible/ansible/pull/73489", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73489" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20191", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20191" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753", "reference_id": "985753", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753" }, { "reference_url": "https://security.archlinux.org/ASA-202102-9", "reference_id": "ASA-202102-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-9" }, { "reference_url": "https://security.archlinux.org/AVG-1437", "reference_id": "AVG-1437", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0663", "reference_id": "RHSA-2021:0663", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0663" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0664", "reference_id": "RHSA-2021:0664", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0664" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1079", "reference_id": "RHSA-2021:1079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2180", "reference_id": "RHSA-2021:2180", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2180" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/24255?format=api", "purl": "pkg:pypi/ansible@2.8.19rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/19740?format=api", "purl": "pkg:pypi/ansible@2.8.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/24253?format=api", "purl": "pkg:pypi/ansible@2.9.18rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/19742?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/64708?format=api", "purl": "pkg:pypi/ansible@2.10.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.7" } ], "aliases": [ "CVE-2021-20191", "GHSA-8f4m-hccc-8qph", "PYSEC-2021-124" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3d73-q2yz-sqg7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7982?format=api", "vulnerability_id": "VCID-5vvq-8gqh-cug2", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1737.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1737.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.35971", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1737" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1737" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-893h-35v4-mxqx", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-893h-35v4-mxqx" }, { "reference_url": "https://github.com/ansible/ansible/issues/67795", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67795" }, { "reference_url": "https://github.com/ansible/ansible/pull/67799", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/67799" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml" }, { "reference_url": "https://github.com/samdoran/ansible", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/samdoran/ansible" }, { "reference_url": "https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d" }, { "reference_url": "https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676" }, { "reference_url": "https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1737", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1737" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802154", "reference_id": "1802154", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802154" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1543", "reference_id": "RHSA-2020:1543", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1543" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1544", "reference_id": "RHSA-2020:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1544" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1737", "GHSA-893h-35v4-mxqx", "PYSEC-2020-9" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5vvq-8gqh-cug2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180094?format=api", "vulnerability_id": "VCID-6c93-cjxv-tqha", "summary": "Multiple vulnerabilities have been found in Ansible, the worst of\n which could result in the arbitrary execution of code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1753.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1753.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16144", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1753" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://github.com/advisories/GHSA-86hp-cj9j-33vv", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-86hp-cj9j-33vv" }, { "reference_url": "https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380" }, { "reference_url": "https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a" }, { "reference_url": "https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6" }, { "reference_url": "https://github.com/ansible/ansible/pull/68195", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/68195" }, { "reference_url": "https://github.com/ansible-collections/kubernetes", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/kubernetes" }, { "reference_url": "https://github.com/ansible-collections/kubernetes/pull/51", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/kubernetes/pull/51" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1753" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811008", "reference_id": "1811008", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1811008" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2142", "reference_id": "RHSA-2020:2142", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2142" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52742?format=api", "purl": "pkg:pypi/ansible@2.7.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/56965?format=api", "purl": "pkg:pypi/ansible@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/57699?format=api", "purl": "pkg:pypi/ansible@2.8.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/56967?format=api", "purl": "pkg:pypi/ansible@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7" } ], "aliases": [ "CVE-2020-1753", "GHSA-86hp-cj9j-33vv", "PYSEC-2020-210" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6c93-cjxv-tqha" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8923?format=api", "vulnerability_id": "VCID-6vx2-ergh-3fb5", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20180.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20180.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20180", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11569", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20180" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1915808", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1915808" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20180" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.8.19/changelogs/CHANGELOG-v2.8.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.8.19/changelogs/CHANGELOG-v2.8.rst" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst" }, { "reference_url": "https://github.com/ansible/ansible/pull/73242", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73242" }, { "reference_url": "https://github.com/ansible/ansible/pull/73243", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73243" }, { "reference_url": "https://github.com/ansible/ansible/tree/v2.7.18/lib/ansible/modules/source_control", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/tree/v2.7.18/lib/ansible/modules/source_control" }, { "reference_url": "https://github.com/ansible/ansible/tree/v2.8.0a1/lib/ansible/modules/source_control", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/tree/v2.8.0a1/lib/ansible/modules/source_control" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753", "reference_id": "985753", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753" }, { "reference_url": "https://security.archlinux.org/ASA-202102-9", "reference_id": "ASA-202102-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-9" }, { "reference_url": "https://security.archlinux.org/AVG-1437", "reference_id": "AVG-1437", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1437" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20180", "reference_id": "CVE-2021-20180", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20180" }, { "reference_url": "https://github.com/advisories/GHSA-fh5v-5f35-2rv2", "reference_id": "GHSA-fh5v-5f35-2rv2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fh5v-5f35-2rv2" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0663", "reference_id": "RHSA-2021:0663", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0663" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0664", "reference_id": "RHSA-2021:0664", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0664" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1079", "reference_id": "RHSA-2021:1079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2180", "reference_id": "RHSA-2021:2180", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2180" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19740?format=api", "purl": "pkg:pypi/ansible@2.8.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/19742?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" } ], "aliases": [ "CVE-2021-20180", "GHSA-fh5v-5f35-2rv2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6vx2-ergh-3fb5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7501?format=api", "vulnerability_id": "VCID-74mp-e5z4-tbfe", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10729.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10729.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20086", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10729" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1831089", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1831089" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-r6h7-5pq2-j77h", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r6h7-5pq2-j77h" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst" }, { "reference_url": "https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9" }, { "reference_url": "https://github.com/ansible/ansible/issues/34144", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/34144" }, { "reference_url": "https://github.com/ansible/ansible/pull/67429", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/67429" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10729" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-10729", "GHSA-r6h7-5pq2-j77h", "PYSEC-2021-105" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-74mp-e5z4-tbfe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4984?format=api", "vulnerability_id": "VCID-7hmy-p927-akff", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3460", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3460" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3461", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3462", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3463", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3463" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3505", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3505" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16837.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16837.json" }, { "reference_url": "https://access.redhat.com/security/cve/cve-2018-16837", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/cve-2018-16837" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00024", "scoring_system": "epss", "scoring_elements": "0.07003", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16837" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-hwrm-63v2-42g4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-hwrm-63v2-42g4" }, { "reference_url": "https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1" }, { "reference_url": "https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0" }, { "reference_url": "https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4" }, { "reference_url": "https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf" }, { "reference_url": "https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23" }, { "reference_url": "https://github.com/ansible/ansible/pull/47436", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/47436" }, { "reference_url": "https://github.com/ansible/ansible/pull/47445", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/47445" }, { "reference_url": "https://github.com/ansible/ansible/pull/47486", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/47486" }, { "reference_url": "https://github.com/ansible/ansible/pull/47487", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/47487" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16837" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "http://www.securityfocus.com/bid/105700", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/105700" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1640642", "reference_id": "1640642", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1640642" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297", "reference_id": "912297", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/47816?format=api", "purl": "pkg:pypi/ansible@2.0.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.0.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52501?format=api", "purl": "pkg:pypi/ansible@2.5.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52500?format=api", "purl": "pkg:pypi/ansible@2.6.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/52499?format=api", "purl": "pkg:pypi/ansible@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.1" } ], "aliases": [ "CVE-2018-16837", "GHSA-hwrm-63v2-42g4", "PYSEC-2018-44" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7hmy-p927-akff" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1969?format=api", "vulnerability_id": "VCID-7qe9-zztp-2qcg", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2778", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2016:2778" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8628.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8628.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8628", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00456", "scoring_system": "epss", "scoring_elements": "0.64331", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8628" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8628", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8628" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/35938b907dfcd1106ca40b794f0db446bdb8cf09", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/35938b907dfcd1106ca40b794f0db446bdb8cf09" }, { "reference_url": "https://github.com/ansible/ansible/issues/41903", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/41903" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-38.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-38.yaml" }, { "reference_url": "https://web.archive.org/web/20200227214455/http://www.securityfocus.com/bid/94109", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227214455/http://www.securityfocus.com/bid/94109" }, { "reference_url": "http://www.securityfocus.com/bid/94109", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/94109" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388113", "reference_id": "1388113", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388113" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842985", "reference_id": "842985", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842985" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8628", "reference_id": "CVE-2016-8628", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8628" }, { "reference_url": "https://github.com/advisories/GHSA-jg4f-jqm5-4mgq", "reference_id": "GHSA-jg4f-jqm5-4mgq", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "9.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jg4f-jqm5-4mgq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13591?format=api", "purl": "pkg:pypi/ansible@2.2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/390791?format=api", "purl": "pkg:pypi/ansible@2.2.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.0" } ], "aliases": [ "CVE-2016-8628", "GHSA-jg4f-jqm5-4mgq", "PYSEC-2018-38" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7qe9-zztp-2qcg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/210437?format=api", "vulnerability_id": "VCID-7ue1-2wu6-6kac", "summary": "A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25635.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25635.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25635", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23602", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25635" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635" }, { "reference_url": "https://github.com/ansible-collections/community.aws/issues/222", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.aws/issues/222" }, { "reference_url": "https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1880275", "reference_id": "1880275", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1880275" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25635", "reference_id": "CVE-2020-25635", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25635" }, { "reference_url": "https://github.com/advisories/GHSA-f556-49jc-4rvc", "reference_id": "GHSA-f556-49jc-4rvc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f556-49jc-4rvc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/34944?format=api", "purl": "pkg:pypi/ansible@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1" } ], "aliases": [ "CVE-2020-25635", "GHSA-f556-49jc-4rvc", "PYSEC-2020-220" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7ue1-2wu6-6kac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1956?format=api", "vulnerability_id": "VCID-9cqv-1b34-6qeu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8614.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8614.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8614", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.2756", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8614" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8614", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8614" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/commit/1182d1f0b76d56f3667e27987a10b9ec8f03357d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/commit/1182d1f0b76d56f3667e27987a10b9ec8f03357d" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/commit/66d47c8149d84e52f64b7c4d1f340d45dca94d9c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/commit/66d47c8149d84e52f64b7c4d1f340d45dca94d9c" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/issues/5237", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/issues/5237" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/pull/5353", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/pull/5353" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/pull/5357", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/pull/5357" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-37.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-37.yaml" }, { "reference_url": "https://web.archive.org/web/20200227214450/https://www.securityfocus.com/bid/94108", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227214450/https://www.securityfocus.com/bid/94108" }, { "reference_url": "http://www.securityfocus.com/bid/94108", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/94108" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388038", "reference_id": "1388038", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388038" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842984", "reference_id": "842984", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842984" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8614", "reference_id": "CVE-2016-8614", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8614" }, { "reference_url": "https://github.com/advisories/GHSA-cmwx-9m2h-x7v4", "reference_id": "GHSA-cmwx-9m2h-x7v4", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cmwx-9m2h-x7v4" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13591?format=api", "purl": "pkg:pypi/ansible@2.2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/390791?format=api", "purl": "pkg:pypi/ansible@2.2.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.0" } ], "aliases": [ "CVE-2016-8614", "GHSA-cmwx-9m2h-x7v4", "PYSEC-2018-37" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9cqv-1b34-6qeu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7984?format=api", "vulnerability_id": "VCID-9hkf-5qv5-8kfc", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1738.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1738.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1738", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00215", "scoring_system": "epss", "scoring_elements": "0.4416", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1738" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1738", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1738" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/issues/67796", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67796" }, { "reference_url": "https://github.com/ansible/ansible/pull/67808", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/67808" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802164", "reference_id": "1802164", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802164" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1738", "reference_id": "CVE-2020-1738", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1738" }, { "reference_url": "https://github.com/advisories/GHSA-f85h-23mf-2fwh", "reference_id": "GHSA-f85h-23mf-2fwh", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f85h-23mf-2fwh" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L" }, { "value": "1.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" } ], "aliases": [ "CVE-2020-1738", "GHSA-f85h-23mf-2fwh", "PYSEC-2020-10" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9hkf-5qv5-8kfc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7508?format=api", "vulnerability_id": "VCID-9w4h-jq9s-g7a9", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10744.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10744.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10744", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11838", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-10744" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10744", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10744" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/77d0effcc5b2da1ef23e4ba32986a9759c27c10d", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/77d0effcc5b2da1ef23e4ba32986a9759c27c10d" }, { "reference_url": "https://github.com/ansible/ansible/commit/84afa8e90cd168ff13208c8eae3e533ce7e21e1f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/84afa8e90cd168ff13208c8eae3e533ce7e21e1f" }, { "reference_url": "https://github.com/ansible/ansible/commit/ffd3757fc35468a97791e452e7f2d14c3e3fcb80", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/ffd3757fc35468a97791e452e7f2d14c3e3fcb80" }, { "reference_url": "https://github.com/ansible/ansible/issues/69782", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/69782" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-208.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-208.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835566", "reference_id": "1835566", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835566" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966660", "reference_id": "966660", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966660" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10744", "reference_id": "CVE-2020-10744", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10744" }, { "reference_url": "https://github.com/advisories/GHSA-vp9j-rghq-8jhh", "reference_id": "GHSA-vp9j-rghq-8jhh", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "2.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vp9j-rghq-8jhh" }, { "reference_url": "https://usn.ubuntu.com/USN-5315-1/", "reference_id": "USN-USN-5315-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-5315-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18996?format=api", "purl": "pkg:pypi/ansible@2.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/57705?format=api", "purl": "pkg:pypi/ansible@2.9.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/19048?format=api", "purl": "pkg:pypi/ansible@2.9.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/18994?format=api", "purl": "pkg:pypi/ansible@2.10.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1" } ], "aliases": [ "CVE-2020-10744", "GHSA-vp9j-rghq-8jhh", "PYSEC-2020-208" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9w4h-jq9s-g7a9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201579?format=api", "vulnerability_id": "VCID-c6xz-7sbm-bkgg", "summary": "Ansible does not verify that the server hostname matches a domain name in certificates", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00051.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00051.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-08/msg00029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-08/msg00029.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3908.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3908.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3908", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00216", "scoring_system": "epss", "scoring_elements": "0.44276", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3908" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3908", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3908" }, { "reference_url": "https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#192-dancing-in-the-street---jun-26-2015", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#192-dancing-in-the-street---jun-26-2015" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2015-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2015-1.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "http://www.ansible.com/security", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.ansible.com/security" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2015/07/14/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2015/07/14/4" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3908", "reference_id": "CVE-2015-3908", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3908" }, { "reference_url": "https://github.com/advisories/GHSA-w64c-pxjj-h866", "reference_id": "GHSA-w64c-pxjj-h866", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w64c-pxjj-h866" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13729?format=api", "purl": "pkg:pypi/ansible@1.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.9.2" } ], "aliases": [ "CVE-2015-3908", "GHSA-w64c-pxjj-h866", "PYSEC-2015-1" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6xz-7sbm-bkgg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/177014?format=api", "vulnerability_id": "VCID-cu9y-y9js-sfgs", "summary": "A vulnerability in Ansible may allow local attackers to gain\n escalated privileges or write arbitrary files.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3096.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3096.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-3096", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11326", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-3096" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1322925", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1322925" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3096" }, { "reference_url": "https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away" }, { "reference_url": "https://github.com/ansible/ansible-modules-extras/commit/7c3999a92a1cd856ff9bc8913a93ff1aee8bffc3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-extras/commit/7c3999a92a1cd856ff9bc8913a93ff1aee8bffc3" }, { "reference_url": "https://github.com/ansible/ansible-modules-extras/pull/1941", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-extras/pull/1941" }, { "reference_url": "https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2016-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2016-1.yaml" }, { "reference_url": "https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0" }, { "reference_url": "https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig" }, { "reference_url": "https://groups.google.com/forum/#!topic/ansible-announce/E80HLZilTU0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#!topic/ansible-announce/E80HLZilTU0" }, { "reference_url": "https://groups.google.com/forum/#!topic/ansible-announce/tqiZbcWxYig", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#!topic/ansible-announce/tqiZbcWxYig" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819676", "reference_id": "819676", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819676" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3096", "reference_id": "CVE-2016-3096", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3096" }, { "reference_url": "https://github.com/advisories/GHSA-rh6x-qvg7-rrmj", "reference_id": "GHSA-rh6x-qvg7-rrmj", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rh6x-qvg7-rrmj" }, { "reference_url": "https://security.gentoo.org/glsa/201607-14", "reference_id": "GLSA-201607-14", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201607-14" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13725?format=api", "purl": "pkg:pypi/ansible@1.9.6.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.9.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/13728?format=api", "purl": "pkg:pypi/ansible@2.0.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.0.2.0" } ], "aliases": [ "CVE-2016-3096", "GHSA-rh6x-qvg7-rrmj", "PYSEC-2016-1" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cu9y-y9js-sfgs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9787?format=api", "vulnerability_id": "VCID-gehx-djwb-hyeu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3871", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2021:3871" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3872", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2021:3872" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3874", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2021:3874" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4703", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2021:4703" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4750", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2021:4750" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3620.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3620.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3620", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0029", "scoring_system": "epss", "scoring_elements": "0.52826", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3620" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3620", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3620" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml" }, { "reference_url": "https://security.archlinux.org/AVG-1941", "reference_id": "AVG-1941", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1941" }, { "reference_url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes", "reference_id": "CHANGELOG-v2.9.rst#security-fixes", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/" } ], "url": "https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2021-3620", "reference_id": "CVE-2021-3620", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2021-3620" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3620", "reference_id": "CVE-2021-3620", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3620" }, { "reference_url": "https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0", "reference_id": "fe28767970c8ec62aabe493c46b53a5de1e5fac0", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/" } ], "url": "https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0" }, { "reference_url": "https://github.com/advisories/GHSA-4r65-35qq-ch8j", "reference_id": "GHSA-4r65-35qq-ch8j", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4r65-35qq-ch8j" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html", "reference_id": "msg00018.html", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975767", "reference_id": "show_bug.cgi?id=1975767", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975767" }, { "reference_url": "https://usn.ubuntu.com/USN-5315-1/", "reference_id": "USN-USN-5315-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-5315-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19576?format=api", "purl": "pkg:pypi/ansible@2.9.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.27" } ], "aliases": [ "CVE-2021-3620", "GHSA-4r65-35qq-ch8j", "PYSEC-2022-164" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gehx-djwb-hyeu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6399?format=api", "vulnerability_id": "VCID-gn4t-xdvs-bfa5", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14904.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14904.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11325", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14904" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-gwr8-5j83-483c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gwr8-5j83-483c" }, { "reference_url": "https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69" }, { "reference_url": "https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907" }, { "reference_url": "https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8" }, { "reference_url": "https://github.com/ansible/ansible/pull/65686", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/65686" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14904" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" }, { "value": "8.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0215", "reference_id": "RHSA-2020:0215", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:0215" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0217", "reference_id": "RHSA-2020:0217", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:0217" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/16195?format=api", "purl": "pkg:pypi/ansible@2.7.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/19055?format=api", "purl": "pkg:pypi/ansible@2.7.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/16194?format=api", "purl": "pkg:pypi/ansible@2.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/56657?format=api", "purl": "pkg:pypi/ansible@2.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56658?format=api", "purl": "pkg:pypi/ansible@2.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/56659?format=api", "purl": "pkg:pypi/ansible@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.3" } ], "aliases": [ "CVE-2019-14904", "GHSA-gwr8-5j83-483c", "PYSEC-2020-161" ], "risk_score": 1.8, "exploitability": "0.5", "weighted_severity": "3.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gn4t-xdvs-bfa5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1978?format=api", "vulnerability_id": "VCID-gqjp-g6rq-ufe4", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1685", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1685" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8647.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8647.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8647", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40006", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8647" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396174", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396174" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8647", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8647" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:N/I:P/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/commit/30fb384e7fb9a94ac3929e4a650877e45d8834c9", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/commit/30fb384e7fb9a94ac3929e4a650877e45d8834c9" }, { "reference_url": "https://github.com/ansible/ansible-modules-core/pull/5388", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible-modules-core/pull/5388" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-58.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-58.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844691", "reference_id": "844691", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844691" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2016-8647", "reference_id": "CVE-2016-8647", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2016-8647" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8647", "reference_id": "CVE-2016-8647", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8647" }, { "reference_url": "https://github.com/advisories/GHSA-x4cm-m36h-c6qj", "reference_id": "GHSA-x4cm-m36h-c6qj", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x4cm-m36h-c6qj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13717?format=api", "purl": "pkg:pypi/ansible@2.2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.1.0" } ], "aliases": [ "CVE-2016-8647", "GHSA-x4cm-m36h-c6qj", "PYSEC-2018-58" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gqjp-g6rq-ufe4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7981?format=api", "vulnerability_id": "VCID-hdq4-sau3-t3b7", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1736.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1736.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1736", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18729", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1736" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1736", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1736" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/issues/67794", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67794" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802124", "reference_id": "1802124", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802124" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663", "reference_id": "966663", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1736", "reference_id": "CVE-2020-1736", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1736" }, { "reference_url": "https://github.com/advisories/GHSA-x7jh-595q-wq82", "reference_id": "GHSA-x7jh-595q-wq82", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x7jh-595q-wq82" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3600", "reference_id": "RHSA-2020:3600", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3600" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/34944?format=api", "purl": "pkg:pypi/ansible@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1" } ], "aliases": [ "CVE-2020-1736", "GHSA-x7jh-595q-wq82", "PYSEC-2020-8" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hdq4-sau3-t3b7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8922?format=api", "vulnerability_id": "VCID-htd4-k6p6-7qhn", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20178.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20178.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20178", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.08407", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20178" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20178" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-wv5p-gmmv-wh9v", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wv5p-gmmv-wh9v" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes" }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes," }, { "reference_url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C" }, { "reference_url": "https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc" }, { "reference_url": "https://github.com/ansible-collections/community.general/pull/1635", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.general/pull/1635" }, { "reference_url": "https://github.com/ansible-collections/community.general/pull/1635,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/community.general/pull/1635," }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20178", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20178" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753", "reference_id": "985753", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753" }, { "reference_url": "https://security.archlinux.org/ASA-202102-9", "reference_id": "ASA-202102-9", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-9" }, { "reference_url": "https://security.archlinux.org/AVG-1437", "reference_id": "AVG-1437", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0663", "reference_id": "RHSA-2021:0663", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0663" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0664", "reference_id": "RHSA-2021:0664", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0664" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1079", "reference_id": "RHSA-2021:1079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2180", "reference_id": "RHSA-2021:2180", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2180" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19742?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" } ], "aliases": [ "CVE-2021-20178", "GHSA-wv5p-gmmv-wh9v", "PYSEC-2021-106" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-htd4-k6p6-7qhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/217925?format=api", "vulnerability_id": "VCID-j7b4-vb5m-gqea", "summary": "A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1776944" }, { "reference_url": "https://github.com/ansible/ansible/pull/65686", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/65686" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/16195?format=api", "purl": "pkg:pypi/ansible@2.7.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/16194?format=api", "purl": "pkg:pypi/ansible@2.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/56658?format=api", "purl": "pkg:pypi/ansible@2.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2" } ], "aliases": [ "PYSEC-2020-180" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j7b4-vb5m-gqea" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7065?format=api", "vulnerability_id": "VCID-jk54-fyfx-jyd9", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3744", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3744" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3789", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3789" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3828.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3828.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00033", "scoring_system": "epss", "scoring_elements": "0.10037", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3828" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110" }, { "reference_url": "https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333" }, { "reference_url": "https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93" }, { "reference_url": "https://github.com/ansible/ansible/pull/52133", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/52133" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676689", "reference_id": "1676689", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676689" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537", "reference_id": "922537", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3828", "reference_id": "CVE-2019-3828", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3828" }, { "reference_url": "https://github.com/advisories/GHSA-74vq-h4q8-x6jv", "reference_id": "GHSA-74vq-h4q8-x6jv", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-74vq-h4q8-x6jv" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0430", "reference_id": "RHSA-2019:0430", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0430" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0431", "reference_id": "RHSA-2019:0431", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0431" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0432", "reference_id": "RHSA-2019:0432", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0432" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0433", "reference_id": "RHSA-2019:0433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0433" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15148?format=api", "purl": "pkg:pypi/ansible@2.5.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/15150?format=api", "purl": "pkg:pypi/ansible@2.6.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/15152?format=api", "purl": "pkg:pypi/ansible@2.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8" } ], "aliases": [ "CVE-2019-3828", "GHSA-74vq-h4q8-x6jv", "PYSEC-2019-5" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jk54-fyfx-jyd9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7986?format=api", "vulnerability_id": "VCID-k1y6-9tte-17b1", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1739.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1739.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14778", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1739" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-923p-fr2c-g5m2", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-923p-fr2c-g5m2" }, { "reference_url": "https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237" }, { "reference_url": "https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f" }, { "reference_url": "https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4" }, { "reference_url": "https://github.com/ansible/ansible/issues/67797", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67797" }, { "reference_url": "https://github.com/ansible/ansible/pull/68911", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/68911" }, { "reference_url": "https://github.com/ansible/ansible/pull/68912", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/68912" }, { "reference_url": "https://github.com/ansible/ansible/pull/68913", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/68913" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1739" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" }, { "value": "2.4", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802178", "reference_id": "1802178", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802178" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1543", "reference_id": "RHSA-2020:1543", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1543" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1544", "reference_id": "RHSA-2020:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1544" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/56965?format=api", "purl": "pkg:pypi/ansible@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/56967?format=api", "purl": "pkg:pypi/ansible@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7" } ], "aliases": [ "CVE-2020-1739", "GHSA-923p-fr2c-g5m2", "PYSEC-2020-11" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1y6-9tte-17b1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/217817?format=api", "vulnerability_id": "VCID-me3g-thr4-qbhc", "summary": "In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3201", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3201" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3202", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3203", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3203" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3207", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3207" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:0756" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846" }, { "reference_url": "https://github.com/ansible/ansible/pull/63366", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/63366" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55585?format=api", "purl": "pkg:pypi/ansible@2.6.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/52739?format=api", "purl": "pkg:pypi/ansible@2.7.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/55586?format=api", "purl": "pkg:pypi/ansible@2.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6" } ], "aliases": [ "PYSEC-2019-74" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-me3g-thr4-qbhc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5015?format=api", "vulnerability_id": "VCID-mhqz-3aw4-qfcr", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3835", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3835" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3836", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3837", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3837" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3838", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:3838" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0564", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:0564" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0590", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:0590" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16876.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16876.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01236", "scoring_system": "epss", "scoring_elements": "0.7963", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16876" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da" }, { "reference_url": "https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7" }, { "reference_url": "https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099" }, { "reference_url": "https://github.com/ansible/ansible/issues/51318", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/51318" }, { "reference_url": "https://github.com/ansible/ansible/pull/49569", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/49569" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4396", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2019/dsa-4396" }, { "reference_url": "http://www.securityfocus.com/bid/106225", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/106225" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1657330", "reference_id": "1657330", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1657330" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102", "reference_id": "916102", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16876", "reference_id": "CVE-2018-16876", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16876" }, { "reference_url": "https://github.com/advisories/GHSA-j569-fghw-f9rx", "reference_id": "GHSA-j569-fghw-f9rx", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j569-fghw-f9rx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21141?format=api", "purl": "pkg:pypi/ansible@2.5.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/21137?format=api", "purl": "pkg:pypi/ansible@2.6.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/21147?format=api", "purl": "pkg:pypi/ansible@2.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" }, { "vulnerability": "VCID-xjfk-wgtr-37c4" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.5" } ], "aliases": [ "CVE-2018-16876", "GHSA-j569-fghw-f9rx", "PYSEC-2019-141" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mhqz-3aw4-qfcr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/99846?format=api", "vulnerability_id": "VCID-mmsh-dxa8-xqhg", "summary": "A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14010.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14010.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14010", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05943", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-14010" }, { "reference_url": "https://github.com/ansible-collections/community.general", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.general" }, { "reference_url": "https://github.com/ansible-collections/community.general/commit/08e56bbb9b57740a879d3057d84cdb02a162b840", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-collections/community.general/commit/08e56bbb9b57740a879d3057d84cdb02a162b840" }, { "reference_url": "https://github.com/ansible-collections/community.general/commit/54af64ad363efe280b34102d2637fe272c1f7320", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible-collections/community.general/commit/54af64ad363efe280b34102d2637fe272c1f7320" }, { "reference_url": "https://github.com/ansible-community/ansible-build-data/blob/12.2.0/12/CHANGELOG-v12.md#security-fixes", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible-community/ansible-build-data/blob/12.2.0/12/CHANGELOG-v12.md#security-fixes" }, { "reference_url": "https://github.com/ansible-collections/community.general/issues/11000", "reference_id": "11000", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/" } ], "url": "https://github.com/ansible-collections/community.general/issues/11000" }, { "reference_url": "https://github.com/ansible-collections/community.general/pull/11005", "reference_id": "11005", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/" } ], "url": "https://github.com/ansible-collections/community.general/pull/11005" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121951", "reference_id": "1121951", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121951" }, { "reference_url": "https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes", "reference_id": "CHANGELOG-v12.md#security-fixes", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/" } ], "url": "https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:5", "reference_id": "cpe:/a:redhat:ceph_storage:5", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:5" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:6", "reference_id": "cpe:/a:redhat:ceph_storage:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:7", "reference_id": "cpe:/a:redhat:ceph_storage:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:8", "reference_id": "cpe:/a:redhat:ceph_storage:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1", "reference_id": "cpe:/a:redhat:openstack:17.1", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0", "reference_id": "cpe:/a:redhat:openstack:18.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-14010", "reference_id": "CVE-2025-14010", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-14010" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14010", "reference_id": "CVE-2025-14010", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14010" }, { "reference_url": "https://github.com/advisories/GHSA-8ggh-xwr9-3373", "reference_id": "GHSA-8ggh-xwr9-3373", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8ggh-xwr9-3373" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418774", "reference_id": "show_bug.cgi?id=2418774", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418774" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/396941?format=api", "purl": "pkg:pypi/ansible@12.0.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@12.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/35862?format=api", "purl": "pkg:pypi/ansible@12.2.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@12.2.0" } ], "aliases": [ "CVE-2025-14010", "GHSA-8ggh-xwr9-3373" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mmsh-dxa8-xqhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205293?format=api", "vulnerability_id": "VCID-mpqq-wudg-jbbc", "summary": "Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1244", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1244" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1334", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1334" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1476", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1476" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1499", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1499" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1599", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1599" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1685", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1685" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7466", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02659", "scoring_system": "epss", "scoring_elements": "0.86112", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7466" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7466" }, { "reference_url": "https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079" }, { "reference_url": "https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c" }, { "reference_url": "https://github.com/ansible/ansible/issues/24186", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/24186" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml" }, { "reference_url": "https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595" }, { "reference_url": "http://www.securityfocus.com/bid/97595", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/97595" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1439212", "reference_id": "1439212", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1439212" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7466", "reference_id": "CVE-2017-7466", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7466" }, { "reference_url": "https://github.com/advisories/GHSA-3m8p-xpm6-8ww3", "reference_id": "GHSA-3m8p-xpm6-8ww3", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3m8p-xpm6-8ww3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13592?format=api", "purl": "pkg:pypi/ansible@2.2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/13593?format=api", "purl": "pkg:pypi/ansible@2.3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-866y-8se7-efa4" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.0.0" } ], "aliases": [ "CVE-2017-7466", "GHSA-3m8p-xpm6-8ww3", "PYSEC-2018-40" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mpqq-wudg-jbbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7987?format=api", "vulnerability_id": "VCID-mr24-6aas-sybn", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1740.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1740.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34716", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1740" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-vcg8-98q8-g7mj", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vcg8-98q8-g7mj" }, { "reference_url": "https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b" }, { "reference_url": "https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73" }, { "reference_url": "https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc" }, { "reference_url": "https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef" }, { "reference_url": "https://github.com/ansible/ansible/issues/67798", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67798" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1740" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802193", "reference_id": "1802193", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802193" }, { "reference_url": "https://security.gentoo.org/glsa/202006-11", "reference_id": "GLSA-202006-11", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202006-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1541", "reference_id": "RHSA-2020:1541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1542", "reference_id": "RHSA-2020:1542", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1542" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1543", "reference_id": "RHSA-2020:1543", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1543" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1544", "reference_id": "RHSA-2020:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1544" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/15508?format=api", "purl": "pkg:pypi/ansible@2.8.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/56699?format=api", "purl": "pkg:pypi/ansible@2.8.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/56965?format=api", "purl": "pkg:pypi/ansible@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/19054?format=api", "purl": "pkg:pypi/ansible@2.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/56967?format=api", "purl": "pkg:pypi/ansible@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7" } ], "aliases": [ "CVE-2020-1740", "GHSA-vcg8-98q8-g7mj", "PYSEC-2020-12" ], "risk_score": 0.9, "exploitability": "0.5", "weighted_severity": "1.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mr24-6aas-sybn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3859?format=api", "vulnerability_id": "VCID-na4w-y2b6-bqg5", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1244", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1244" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1334", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1334" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1476", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1476" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1499", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1499" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1599", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1599" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2524", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:2524" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7481", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04313", "scoring_system": "epss", "scoring_elements": "0.89136", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7481" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7481", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7481" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3" }, { "reference_url": "https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2" }, { "reference_url": "https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29" }, { "reference_url": "https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" }, { "reference_url": "https://usn.ubuntu.com/4072-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4072-1" }, { "reference_url": "https://usn.ubuntu.com/4072-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4072-1/" }, { "reference_url": "https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492" }, { "reference_url": "http://www.securityfocus.com/bid/98492", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/98492" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1450018", "reference_id": "1450018", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1450018" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666", "reference_id": "862666", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7481", "reference_id": "CVE-2017-7481", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7481" }, { "reference_url": "https://github.com/advisories/GHSA-w578-j992-554x", "reference_id": "GHSA-w578-j992-554x", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w578-j992-554x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13595?format=api", "purl": "pkg:pypi/ansible@2.1.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.1.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/13592?format=api", "purl": "pkg:pypi/ansible@2.2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/13594?format=api", "purl": "pkg:pypi/ansible@2.3.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-866y-8se7-efa4" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/13721?format=api", "purl": "pkg:pypi/ansible@2.4.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-79pk-c232-p3by" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-866y-8se7-efa4" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-g4hd-2wy4-mbbu" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v65b-mc9c-1kbp" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.0.0" } ], "aliases": [ "CVE-2017-7481", "GHSA-w578-j992-554x", "PYSEC-2018-41" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-na4w-y2b6-bqg5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2145?format=api", "vulnerability_id": "VCID-nfws-dgab-euh5", "summary": "", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2017-0195.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2017-0195.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2017-0260.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2017-0260.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0448", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:0448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0515", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:0515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1685", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1685" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9587.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9587.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9587", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03045", "scoring_system": "epss", "scoring_elements": "0.86978", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9587" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9587", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9587" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:C/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-39.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-39.yaml" }, { "reference_url": "https://web.archive.org/web/20170115210655/http://www.securityfocus.com/bid/95352", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170115210655/http://www.securityfocus.com/bid/95352" }, { "reference_url": "https://www.exploit-db.com/exploits/41013", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.exploit-db.com/exploits/41013" }, { "reference_url": "https://www.exploit-db.com/exploits/41013/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.exploit-db.com/exploits/41013/" }, { "reference_url": "http://www.securityfocus.com/bid/95352", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/95352" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1404378", "reference_id": "1404378", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1404378" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850846", "reference_id": "850846", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850846" }, { "reference_url": "https://security.archlinux.org/AVG-137", "reference_id": "AVG-137", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-137" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9587", "reference_id": "CVE-2016-9587", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9587" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/41013.txt", "reference_id": "CVE-2016-9587;CT-2017-0109", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/41013.txt" }, { "reference_url": "https://www.computest.nl/advisories/CT-2017-0109_Ansible.txt", "reference_id": "CVE-2016-9587;CT-2017-0109", "reference_type": "exploit", "scores": [], "url": "https://www.computest.nl/advisories/CT-2017-0109_Ansible.txt" }, { "reference_url": "https://github.com/advisories/GHSA-m956-frf4-m2wr", "reference_id": "GHSA-m956-frf4-m2wr", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m956-frf4-m2wr" }, { "reference_url": "https://security.gentoo.org/glsa/201701-77", "reference_id": "GLSA-201701-77", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201701-77" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0195", "reference_id": "RHSA-2017:0195", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0195" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0260", "reference_id": "RHSA-2017:0260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0260" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13716?format=api", "purl": "pkg:pypi/ansible@2.1.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.1.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/13717?format=api", "purl": "pkg:pypi/ansible@2.2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.1.0" } ], "aliases": [ "CVE-2016-9587", "GHSA-m956-frf4-m2wr", "PYSEC-2018-39" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nfws-dgab-euh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8944?format=api", "vulnerability_id": "VCID-nkck-45s4-uqdg", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20228.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20228.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00243", "scoring_system": "epss", "scoring_elements": "0.47858", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20228" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1925002", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1925002" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c" }, { "reference_url": "https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b" }, { "reference_url": "https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120" }, { "reference_url": "https://github.com/ansible/ansible/pull/73487", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73487" }, { "reference_url": "https://github.com/ansible/ansible/pull/73492", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73492" }, { "reference_url": "https://github.com/ansible/ansible/pull/73493", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73493" }, { "reference_url": "https://github.com/ansible/ansible/pull/73494", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/73494" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20228", "reference_id": "CVE-2021-20228", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20228" }, { "reference_url": "https://github.com/advisories/GHSA-5rrg-rr89-x9mv", "reference_id": "GHSA-5rrg-rr89-x9mv", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5rrg-rr89-x9mv" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0663", "reference_id": "RHSA-2021:0663", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0663" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0664", "reference_id": "RHSA-2021:0664", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0664" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1079", "reference_id": "RHSA-2021:1079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2180", "reference_id": "RHSA-2021:2180", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2180" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/47816?format=api", "purl": "pkg:pypi/ansible@2.0.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.0.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24255?format=api", "purl": "pkg:pypi/ansible@2.8.19rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/16193?format=api", "purl": "pkg:pypi/ansible@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24253?format=api", "purl": "pkg:pypi/ansible@2.9.18rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/60692?format=api", "purl": "pkg:pypi/ansible@2.9.19rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/60693?format=api", "purl": "pkg:pypi/ansible@2.9.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/24258?format=api", "purl": "pkg:pypi/ansible@2.10.6rc1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.6rc1" } ], "aliases": [ "CVE-2021-20228", "GHSA-5rrg-rr89-x9mv", "PYSEC-2021-1" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nkck-45s4-uqdg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9715?format=api", "vulnerability_id": "VCID-p59n-33jf-mfag", "summary": "", "references": [ { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956477", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956477" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://security.archlinux.org/AVG-2056", "reference_id": "AVG-2056", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2056" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3533", "reference_id": "CVE-2021-3533", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3533" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/47816?format=api", "purl": "pkg:pypi/ansible@2.0.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.0.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/65125?format=api", "purl": "pkg:pypi/ansible@3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0" } ], "aliases": [ "CVE-2021-3533", "PYSEC-2021-126" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p59n-33jf-mfag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/204000?format=api", "vulnerability_id": "VCID-rgf5-469p-3yb6", "summary": "The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6240.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6240.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6240", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13491", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6240" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243468", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243468" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6240", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6240" }, { "reference_url": "https://github.com/advisories/GHSA-wwwh-47wp-m522", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-wwwh-47wp-m522" }, { "reference_url": "https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#192-dancing-in-the-street---jun-26-2015", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#192-dancing-in-the-street---jun-26-2015" }, { "reference_url": "https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647" }, { "reference_url": "https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2017-3.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2017-3.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6240", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6240" }, { "reference_url": "http://www.ansible.com/security", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.ansible.com/security" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2015/08/17/10", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2015/08/17/10" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13729?format=api", "purl": "pkg:pypi/ansible@1.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-2mn4-wz9d-b7cu" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7hmy-p927-akff" }, { "vulnerability": "VCID-7qe9-zztp-2qcg" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9cqv-1b34-6qeu" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-cu9y-y9js-sfgs" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-gqjp-g6rq-ufe4" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-jk54-fyfx-jyd9" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mhqz-3aw4-qfcr" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mpqq-wudg-jbbc" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-na4w-y2b6-bqg5" }, { "vulnerability": "VCID-nfws-dgab-euh5" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sbyy-fg58-jfeh" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-vg9v-rpvu-gkh4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.9.2" } ], "aliases": [ "CVE-2015-6240", "GHSA-wwwh-47wp-m522", "PYSEC-2017-3" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rgf5-469p-3yb6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7760?format=api", "vulnerability_id": "VCID-rt9h-zyku-rye3", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14330.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14330.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00218", "scoring_system": "epss", "scoring_elements": "0.44465", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14330" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e" }, { "reference_url": "https://github.com/ansible/ansible/issues/68400", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/68400" }, { "reference_url": "https://github.com/ansible/ansible/pull/69653", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/69653" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856815", "reference_id": "1856815", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856815" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14330", "reference_id": "CVE-2020-14330", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14330" }, { "reference_url": "https://github.com/advisories/GHSA-785x-qw4v-6872", "reference_id": "GHSA-785x-qw4v-6872", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-785x-qw4v-6872" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3600", "reference_id": "RHSA-2020:3600", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3600" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19048?format=api", "purl": "pkg:pypi/ansible@2.9.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/19052?format=api", "purl": "pkg:pypi/ansible@2.10.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0" } ], "aliases": [ "CVE-2020-14330", "GHSA-785x-qw4v-6872", "PYSEC-2020-3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rt9h-zyku-rye3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/217788?format=api", "vulnerability_id": "VCID-sbyy-fg58-jfeh", "summary": "A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3744", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3744" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3789" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156" }, { "reference_url": "https://github.com/ansible/ansible/pull/57188", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/ansible/ansible/pull/57188" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15510?format=api", "purl": "pkg:pypi/ansible@2.6.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/15507?format=api", "purl": "pkg:pypi/ansible@2.7.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/15509?format=api", "purl": "pkg:pypi/ansible@2.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-4wfp-1gza-cya3" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2" } ], "aliases": [ "PYSEC-2019-72" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sbyy-fg58-jfeh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7979?format=api", "vulnerability_id": "VCID-t1xr-3yfm-83hb", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHBA-2020:0547", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHBA-2020:0547" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2020:1539", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHBA-2020:1539" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1734.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1734.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1734", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24215", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1734" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801804", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1801804" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1734" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b" }, { "reference_url": "https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0" }, { "reference_url": "https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f" }, { "reference_url": "https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0" }, { "reference_url": "https://github.com/ansible/ansible/issues/67792", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/67792" }, { "reference_url": "https://github.com/ansible/ansible/issues/70159", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/issues/70159" }, { "reference_url": "https://github.com/ansible/ansible/pull/70596", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/70596" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2020-1734", "reference_id": "CVE-2020-1734", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/CVE-2020-1734" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1734", "reference_id": "CVE-2020-1734", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1734" }, { "reference_url": "https://github.com/advisories/GHSA-h39q-95q5-9jfp", "reference_id": "GHSA-h39q-95q5-9jfp", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h39q-95q5-9jfp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52741?format=api", "purl": "pkg:pypi/ansible@2.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/18996?format=api", "purl": "pkg:pypi/ansible@2.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/18995?format=api", "purl": "pkg:pypi/ansible@2.9.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/18994?format=api", "purl": "pkg:pypi/ansible@2.10.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1" } ], "aliases": [ "CVE-2020-1734", "GHSA-h39q-95q5-9jfp", "PYSEC-2020-6" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1xr-3yfm-83hb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9760?format=api", "vulnerability_id": "VCID-t3p1-ygpr-h7bw", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3583.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3583.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3583", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00276", "scoring_system": "epss", "scoring_elements": "0.5134", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3583" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968412", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968412" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3583", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3583" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-2pfh-q76x-gwvm", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2pfh-q76x-gwvm" }, { "reference_url": "https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e" }, { "reference_url": "https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847" }, { "reference_url": "https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1" }, { "reference_url": "https://github.com/ansible/ansible/pull/74960", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/74960" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3583", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3583" }, { "reference_url": "https://security.archlinux.org/AVG-2260", "reference_id": "AVG-2260", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2663", "reference_id": "RHSA-2021:2663", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2663" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:2664", "reference_id": "RHSA-2021:2664", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:2664" }, { "reference_url": "https://usn.ubuntu.com/USN-5315-1/", "reference_id": "USN-USN-5315-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/USN-5315-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/60700?format=api", "purl": "pkg:pypi/ansible@2.9.23rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/60701?format=api", "purl": "pkg:pypi/ansible@2.9.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/382598?format=api", "purl": "pkg:pypi/ansible@2.10.11rc1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.11rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/382599?format=api", "purl": "pkg:pypi/ansible@2.11.2rc1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.11.2rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/65123?format=api", "purl": "pkg:pypi/ansible@3.0.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0b1" } ], "aliases": [ "CVE-2021-3583", "GHSA-2pfh-q76x-gwvm", "PYSEC-2021-358" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t3p1-ygpr-h7bw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6377?format=api", "vulnerability_id": "VCID-u7nm-vqu5-pkaw", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3201", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3201" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3202", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3203", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3203" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3207", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3207" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:0756", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2020:0756" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14846.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14846.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00117", "scoring_system": "epss", "scoring_elements": "0.30027", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-14846" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-pm48-cvv2-29q5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-pm48-cvv2-29q5" }, { "reference_url": "https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4" }, { "reference_url": "https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034" }, { "reference_url": "https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b" }, { "reference_url": "https://github.com/ansible/ansible/pull/63366", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/63366" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14846" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755373", "reference_id": "1755373", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755373" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188", "reference_id": "942188", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188" }, { "reference_url": "https://usn.ubuntu.com/7330-1/", "reference_id": "USN-7330-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7330-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55585?format=api", "purl": "pkg:pypi/ansible@2.6.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/52739?format=api", "purl": "pkg:pypi/ansible@2.7.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/55586?format=api", "purl": "pkg:pypi/ansible@2.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/19741?format=api", "purl": "pkg:pypi/ansible@2.9.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-svcq-35hp-87bw" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.0b1" } ], "aliases": [ "CVE-2019-14846", "GHSA-pm48-cvv2-29q5", "PYSEC-2019-4" ], "risk_score": 0.6, "exploitability": "0.5", "weighted_severity": "1.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u7nm-vqu5-pkaw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17881?format=api", "vulnerability_id": "VCID-ur8z-srmt-17au", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5764.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5764.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5764", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20384", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5764" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5764", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5764" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f" }, { "reference_url": "https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a" }, { "reference_url": "https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5764", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5764" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057427", "reference_id": "1057427", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057427" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el8", "reference_id": "cpe:/a:redhat:ansible_automation_platform:2.4::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el9", "reference_id": "cpe:/a:redhat:ansible_automation_platform:2.4::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8", "reference_id": "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9", "reference_id": "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8", "reference_id": "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9", "reference_id": "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-5764", "reference_id": "CVE-2023-5764", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-5764" }, { "reference_url": "https://github.com/advisories/GHSA-7j69-qfc3-2fq9", "reference_id": "GHSA-7j69-qfc3-2fq9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7j69-qfc3-2fq9" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7773", "reference_id": "RHSA-2023:7773", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2023:7773" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247629", "reference_id": "show_bug.cgi?id=2247629", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247629" }, { "reference_url": "https://usn.ubuntu.com/6846-1/", "reference_id": "USN-6846-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6846-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65123?format=api", "purl": "pkg:pypi/ansible@3.0.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-p59n-33jf-mfag" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/65125?format=api", "purl": "pkg:pypi/ansible@3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0" } ], "aliases": [ "CVE-2023-5764", "GHSA-7j69-qfc3-2fq9" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ur8z-srmt-17au" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8048?format=api", "vulnerability_id": "VCID-v76s-gmp4-qucp", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-20178", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60397", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-20178" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1914774" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-20178", "reference_id": "CVE-2020-20178", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-20178" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19742?format=api", "purl": "pkg:pypi/ansible@2.9.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-ur8z-srmt-17au" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18" } ], "aliases": [ "CVE-2020-20178" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v76s-gmp4-qucp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5972?format=api", "vulnerability_id": "VCID-vg9v-rpvu-gkh4", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3744", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3744" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3789", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2019:3789" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10156.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10156.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00589", "scoring_system": "epss", "scoring_elements": "0.69647", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10156" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922" }, { "reference_url": "https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375" }, { "reference_url": "https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a" }, { "reference_url": "https://github.com/ansible/ansible/pull/57188", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ansible/ansible/pull/57188" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4950", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4950" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717311", "reference_id": "1717311", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717311" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065", "reference_id": "930065", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10156", "reference_id": "CVE-2019-10156", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10156" }, { "reference_url": "https://github.com/advisories/GHSA-grgm-pph5-j5h7", "reference_id": "GHSA-grgm-pph5-j5h7", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-grgm-pph5-j5h7" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1705", "reference_id": "RHSA-2019:1705", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1705" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1706", "reference_id": "RHSA-2019:1706", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1706" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1707", "reference_id": "RHSA-2019:1707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1708", "reference_id": "RHSA-2019:1708", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1708" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15510?format=api", "purl": "pkg:pypi/ansible@2.6.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/15507?format=api", "purl": "pkg:pypi/ansible@2.7.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-2ggn-yasq-5qg6" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/15509?format=api", "purl": "pkg:pypi/ansible@2.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ggg-7w5s-r3g2" }, { "vulnerability": "VCID-1u93-v71q-pbht" }, { "vulnerability": "VCID-2atd-9e9a-vbgk" }, { "vulnerability": "VCID-3d73-q2yz-sqg7" }, { "vulnerability": "VCID-3qjx-9zer-5fbp" }, { "vulnerability": "VCID-4wfp-1gza-cya3" }, { "vulnerability": "VCID-5374-13v2-dkbz" }, { "vulnerability": "VCID-5vvq-8gqh-cug2" }, { "vulnerability": "VCID-5z6w-3nxf-5ydh" }, { "vulnerability": "VCID-6c93-cjxv-tqha" }, { "vulnerability": "VCID-6vx2-ergh-3fb5" }, { "vulnerability": "VCID-6z7e-kur7-s3a9" }, { "vulnerability": "VCID-74mp-e5z4-tbfe" }, { "vulnerability": "VCID-7ue1-2wu6-6kac" }, { "vulnerability": "VCID-9hkf-5qv5-8kfc" }, { "vulnerability": "VCID-9w4h-jq9s-g7a9" }, { "vulnerability": "VCID-aa3e-xzv2-tug4" }, { "vulnerability": "VCID-d2nm-cz1p-vqgj" }, { "vulnerability": "VCID-e39p-c77f-b7az" }, { "vulnerability": "VCID-ezv8-7z4h-hyaq" }, { "vulnerability": "VCID-gehx-djwb-hyeu" }, { "vulnerability": "VCID-gn4t-xdvs-bfa5" }, { "vulnerability": "VCID-hdq4-sau3-t3b7" }, { "vulnerability": "VCID-htd4-k6p6-7qhn" }, { "vulnerability": "VCID-j7b4-vb5m-gqea" }, { "vulnerability": "VCID-k1y6-9tte-17b1" }, { "vulnerability": "VCID-kh5v-q6tc-u3c7" }, { "vulnerability": "VCID-me3g-thr4-qbhc" }, { "vulnerability": "VCID-mmsh-dxa8-xqhg" }, { "vulnerability": "VCID-mr24-6aas-sybn" }, { "vulnerability": "VCID-nkck-45s4-uqdg" }, { "vulnerability": "VCID-p59n-33jf-mfag" }, { "vulnerability": "VCID-r2n4-9a3r-e3ht" }, { "vulnerability": "VCID-rt9h-zyku-rye3" }, { "vulnerability": "VCID-sfrc-87j7-uqgb" }, { "vulnerability": "VCID-t1xr-3yfm-83hb" }, { "vulnerability": "VCID-t3p1-ygpr-h7bw" }, { "vulnerability": "VCID-u7nm-vqu5-pkaw" }, { "vulnerability": "VCID-ur8z-srmt-17au" }, { "vulnerability": "VCID-utqg-ase5-tubs" }, { "vulnerability": "VCID-v76s-gmp4-qucp" }, { "vulnerability": "VCID-xyh4-dmqm-v7dc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2" } ], "aliases": [ "CVE-2019-10156", "GHSA-grgm-pph5-j5h7", "PYSEC-2019-2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vg9v-rpvu-gkh4" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@1.9.1" }