{"url":"http://public2.vulnerablecode.io/api/packages/54142?format=json","purl":"pkg:pypi/ansible@2.4","type":"pypi","namespace":"","name":"ansible","version":"2.4","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"8.5.0","latest_non_vulnerable_version":"12.2.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7586?format=json","vulnerability_id":"VCID-kva6-sjfx-rbe3","summary":"A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html"},{"reference_url":"https://access.redhat.com/errata/RHBA-2018:3788","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHBA-2018:3788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2150","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2150"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2151","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2151"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2152","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2152"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2166","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2321","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2585","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2585"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0054","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:0054"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-10875","reference_id":"","reference_type":"","scores":[{"value":"0.00067","scoring_system":"epss","scoring_elements":"0.20957","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-10875"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/4cecbe81adbc655d7ab734165d3ac539f8ba5981","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/4cecbe81adbc655d7ab734165d3ac539f8ba5981"},{"reference_url":"https://github.com/ansible/ansible/commit/f32c42c37aaf7b9db93ea3151b2f42a0c4bd8172","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/f32c42c37aaf7b9db93ea3151b2f42a0c4bd8172"},{"reference_url":"https://github.com/ansible/ansible/commit/ff980afefdbe4ceb828bdb1bb2eef03cf616bf63","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/ff980afefdbe4ceb828bdb1bb2eef03cf616bf63"},{"reference_url":"https://github.com/ansible/ansible/issues/42388","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/issues/42388"},{"reference_url":"https://github.com/ansible/ansible/pull/42070","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/42070"},{"reference_url":"https://github.com/ansible/ansible/pull/43583","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/43583"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-43.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-43.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html"},{"reference_url":"https://usn.ubuntu.com/4072-1","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4072-1"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"},{"reference_url":"https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396"},{"reference_url":"https://www.debian.org/security/2019/dsa-4396","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.debian.org/security/2019/dsa-4396"},{"reference_url":"http://www.securitytracker.com/id/1041396","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1041396"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10875","reference_id":"CVE-2018-10875","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10875"},{"reference_url":"https://github.com/advisories/GHSA-fc4h-467w-46rh","reference_id":"GHSA-fc4h-467w-46rh","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-fc4h-467w-46rh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/10360?format=json","purl":"pkg:pypi/ansible@2.4.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-kva6-sjfx-rbe3"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/10361?format=json","purl":"pkg:pypi/ansible@2.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-98zq-xddz-dyc8"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-kva6-sjfx-rbe3"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/10362?format=json","purl":"pkg:pypi/ansible@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-98zq-xddz-dyc8"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1"}],"aliases":["CVE-2018-10875","GHSA-fc4h-467w-46rh","PYSEC-2018-43"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kva6-sjfx-rbe3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7579?format=json","vulnerability_id":"VCID-qbws-64b9-83fc","summary":"In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.","references":[{"reference_url":"https://access.redhat.com/errata/RHBA-2018:3788","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHBA-2018:3788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2150","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2150"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2151","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2151"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2152","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2152"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2166","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2321","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2321"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2585","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:2585"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0054","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2019:0054"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-10874","reference_id":"","reference_type":"","scores":[{"value":"0.0005","scoring_system":"epss","scoring_elements":"0.16077","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-10874"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596528","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596528"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ansible/ansible","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible"},{"reference_url":"https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7"},{"reference_url":"https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e"},{"reference_url":"https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb"},{"reference_url":"https://github.com/ansible/ansible/pull/42067","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ansible/ansible/pull/42067"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml"},{"reference_url":"https://usn.ubuntu.com/4072-1","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/4072-1"},{"reference_url":"https://usn.ubuntu.com/4072-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/4072-1/"},{"reference_url":"https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396"},{"reference_url":"http://www.securitytracker.com/id/1041396","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1041396"},{"reference_url":"https://access.redhat.com/security/cve/CVE-2018-10874","reference_id":"CVE-2018-10874","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/security/cve/CVE-2018-10874"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10874","reference_id":"CVE-2018-10874","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10874"},{"reference_url":"https://github.com/advisories/GHSA-3xvg-x47j-x75w","reference_id":"GHSA-3xvg-x47j-x75w","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3xvg-x47j-x75w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/10360?format=json","purl":"pkg:pypi/ansible@2.4.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-kva6-sjfx-rbe3"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/10361?format=json","purl":"pkg:pypi/ansible@2.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-98zq-xddz-dyc8"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-kva6-sjfx-rbe3"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/10362?format=json","purl":"pkg:pypi/ansible@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-39vn-b7y4-v3ez"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-3v1a-j6eq-57dk"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-52zf-mjec-f3d5"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-98zq-xddz-dyc8"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1"}],"aliases":["CVE-2018-10874","GHSA-3xvg-x47j-x75w","PYSEC-2018-81"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qbws-64b9-83fc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7543?format=json","vulnerability_id":"VCID-smbs-h4tr-3qbv","summary":"transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2018:0591","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:0591"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:0646","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:0646"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1124","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1124"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1125","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1125"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1213","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1213"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1274","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1274"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1328","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1328"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1525","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1525"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1972","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2018:1972"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-7750","reference_id":"","reference_type":"","scores":[{"value":"0.13825","scoring_system":"epss","scoring_elements":"0.9441","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-7750"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"10","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/advisories/GHSA-232r-66cg-79px","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-232r-66cg-79px"},{"reference_url":"https://github.com/paramiko/paramiko","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko"},{"reference_url":"https://github.com/paramiko/paramiko/blob/e861c7697622774071ce73b46ffe8817eacdedfa/sites/www/changelog.rst?plain=1#L759-L763","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko/blob/e861c7697622774071ce73b46ffe8817eacdedfa/sites/www/changelog.rst?plain=1#L759-L763"},{"reference_url":"https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst"},{"reference_url":"https://github.com/paramiko/paramiko/commit/e9dfd854bdaf8af15d7834f7502a0451d217bb8c","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko/commit/e9dfd854bdaf8af15d7834f7502a0451d217bb8c"},{"reference_url":"https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516"},{"reference_url":"https://github.com/paramiko/paramiko/issues/1175","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/paramiko/paramiko/issues/1175"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-19.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-19.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html"},{"reference_url":"https://usn.ubuntu.com/3603-1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/3603-1"},{"reference_url":"https://usn.ubuntu.com/3603-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3603-1/"},{"reference_url":"https://usn.ubuntu.com/3603-2","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://usn.ubuntu.com/3603-2"},{"reference_url":"https://usn.ubuntu.com/3603-2/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3603-2/"},{"reference_url":"https://web.archive.org/web/20190831123128/http://www.securityfocus.com/bid/103713","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20190831123128/http://www.securityfocus.com/bid/103713"},{"reference_url":"https://www.exploit-db.com/exploits/45712","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.exploit-db.com/exploits/45712"},{"reference_url":"https://www.exploit-db.com/exploits/45712/","reference_id":"","reference_type":"","scores":[],"url":"https://www.exploit-db.com/exploits/45712/"},{"reference_url":"http://www.securityfocus.com/bid/103713","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/103713"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892859","reference_id":"892859","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892859"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45712.py","reference_id":"CVE-2018-7750","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45712.py"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7750","reference_id":"CVE-2018-7750","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7750"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/9343?format=json","purl":"pkg:pypi/ansible@2.4.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-257n-yc2z-hfe8"},{"vulnerability":"VCID-3jxq-kxnz-6bfh"},{"vulnerability":"VCID-4331-d5yy-uybc"},{"vulnerability":"VCID-46yu-yqv4-1ugb"},{"vulnerability":"VCID-49gh-wgmc-mfew"},{"vulnerability":"VCID-5mcc-gtrr-j3e4"},{"vulnerability":"VCID-5r2p-dxtk-pkas"},{"vulnerability":"VCID-6hdk-ywcn-4qe4"},{"vulnerability":"VCID-6smx-ju23-8qes"},{"vulnerability":"VCID-6swz-79ue-bbef"},{"vulnerability":"VCID-7f2g-zz9p-sufc"},{"vulnerability":"VCID-826d-vdw1-dbaj"},{"vulnerability":"VCID-95kg-bk3s-g7gx"},{"vulnerability":"VCID-axds-bd49-fbdj"},{"vulnerability":"VCID-b423-t4kx-eqbq"},{"vulnerability":"VCID-b8cv-v25q-1kh3"},{"vulnerability":"VCID-bmq3-uckn-tfhk"},{"vulnerability":"VCID-brft-snn6-guc8"},{"vulnerability":"VCID-ce7n-7xet-pyav"},{"vulnerability":"VCID-enwa-2cfn-5uab"},{"vulnerability":"VCID-gnq4-v5a7-m3ew"},{"vulnerability":"VCID-hyr1-b223-bkef"},{"vulnerability":"VCID-j4px-r23h-9kb7"},{"vulnerability":"VCID-kgjy-7kdy-c3cg"},{"vulnerability":"VCID-kva6-sjfx-rbe3"},{"vulnerability":"VCID-m87b-eb5y-8ydf"},{"vulnerability":"VCID-n2b8-e8fa-2ue1"},{"vulnerability":"VCID-nx86-xnct-afbs"},{"vulnerability":"VCID-p6cz-c9ah-c7cp"},{"vulnerability":"VCID-qbws-64b9-83fc"},{"vulnerability":"VCID-qtt6-8kf8-1fbt"},{"vulnerability":"VCID-rarq-tdjt-hff3"},{"vulnerability":"VCID-rnub-zmb6-5yhw"},{"vulnerability":"VCID-uvca-5e2n-pqew"},{"vulnerability":"VCID-xk7s-y611-mffc"},{"vulnerability":"VCID-xn7b-vz2e-6qdh"},{"vulnerability":"VCID-zcmk-4k97-kkd9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.1.0"}],"aliases":["CVE-2018-7750","GHSA-232r-66cg-79px","PYSEC-2018-19"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-smbs-h4tr-3qbv"}],"fixing_vulnerabilities":[],"risk_score":"4.5","resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4"}