ansible (PyPI)
Advisories
210
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 12.2.0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "ansible>=12.2.0"poetry
poetry add "ansible>=12.2.0"uv
uv add "ansible>=12.2.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-8ggh-xwr9-3373 Ansible Community General Collection is vulnerable to exposure of sensitive information |
Medium EPSS 0.19% |
< 12.2.0 | 12.2.0 |
| GHSA-8ggh-xwr9-3373 Ansible Community General Collection is vulnerable to exposure of sensitive information |
Medium EPSS 0.19% |
< 12.2.0 | 12.2.0 |
| GHSA-jpvw-p8pr-9g2x Ansible symlink attack vulnerability |
Medium EPSS 1.01% |
< 8.5.0 | 8.5.0 |
| GHSA-jpvw-p8pr-9g2x Ansible symlink attack vulnerability |
Medium EPSS 1.01% |
< 8.5.0 | 8.5.0 |
| GHSA-cpx3-93w7-457x Ansible leaks password to logs |
High EPSS 0.90% |
>= 2.5.0, < 7.0.0 | 7.0.0 |
| GHSA-cpx3-93w7-457x Ansible leaks password to logs |
High EPSS 0.90% |
>= 2.5.0, < 7.0.0 | 7.0.0 |
| GHSA-fh5v-5f35-2rv2 Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.31% |
>= 2.8.0a1, < 2.8.19>= 2.9.0b1, < 2.9.18 | 2.8.192.9.18 |
| GHSA-fh5v-5f35-2rv2 Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.31% |
>= 2.8.0a1, < 2.8.19 | 2.8.19 |
| GHSA-fh5v-5f35-2rv2 Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.31% |
>= 2.9.0b1, < 2.9.18 | 2.9.18 |
| GHSA-4r65-35qq-ch8j Ansible discloses sensitive information in traceback error message |
Medium EPSS 0.39% |
< 2.9.27 | 2.9.27 |
| GHSA-4r65-35qq-ch8j Ansible discloses sensitive information in traceback error message |
Medium EPSS 0.39% |
< 2.9.27 | 2.9.27 |
| GHSA-2pfh-q76x-gwvm Improper Input Validation and Command Injection in Ansible |
High EPSS 0.90% |
>= 2.10.0a1, < 2.10.11rc1 | 2.10.11rc1 |
| GHSA-2pfh-q76x-gwvm Improper Input Validation and Command Injection in Ansible |
High EPSS 0.90% |
>= 2.11.0a1, < 2.11.2rc1 | 2.11.2rc1 |
| GHSA-2pfh-q76x-gwvm Improper Input Validation and Command Injection in Ansible |
High EPSS 0.90% |
< 2.9.23 | 2.9.23 |
| GHSA-2pfh-q76x-gwvm Improper Input Validation and Command Injection in Ansible |
High EPSS 0.90% |
< 2.9.23rc1 | 2.9.23rc1 |
| PYSEC-2021-125 A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable… Withdrawn |
Not rated yet | all versions | No fix yet |
| PYSEC-2021-126 A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. |
Not rated yet | < 3.0.0 | 3.0.0 |
| GHSA-r6h7-5pq2-j77h Insufficiently random values in Ansible |
Medium EPSS 0.44% |
< 2.9.6 | 2.9.6 |
| GHSA-r6h7-5pq2-j77h Insufficiently random values in Ansible |
Medium EPSS 0.44% |
< 2.9.6 | 2.9.6 |
| GHSA-8f4m-hccc-8qph Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.35% |
< 2.8.19>= 2.9.0, < 2.9.18>= 2.10.0, < 2.10.7 | 2.8.192.9.182.10.7 |
| GHSA-8f4m-hccc-8qph Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.35% |
>= 2.9.0a1, < 2.9.18rc1 | 2.9.18rc1 |
| GHSA-8f4m-hccc-8qph Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.35% |
< 2.8.19rc1 | 2.8.19rc1 |
| GHSA-8f4m-hccc-8qph Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.35% |
>= 2.10.0a1, < 2.10.7 | 2.10.7 |
| GHSA-wv5p-gmmv-wh9v Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.34% |
< 2.9.18 | 2.9.18 |
| GHSA-wv5p-gmmv-wh9v Insertion of Sensitive Information into Log File in ansible |
Medium EPSS 0.34% |
< 2.9.18 | 2.9.18 |
| GHSA-5rrg-rr89-x9mv Ansible Exposes Sensitive Information |
High EPSS 2.06% |
>= 2.10.0a1, < 2.10.6rc1 | 2.10.6rc1 |
| GHSA-5rrg-rr89-x9mv Ansible Exposes Sensitive Information |
High EPSS 2.06% |
>= 2.9.0a1, < 2.9.18rc1 | 2.9.18rc1 |
| GHSA-5rrg-rr89-x9mv Ansible Exposes Sensitive Information |
High EPSS 2.06% |
< 2.8.19rc1 | 2.8.19rc1 |
| GHSA-5rrg-rr89-x9mv Ansible Exposes Sensitive Information |
High EPSS 2.06% |
< 2.9.19 | 2.9.19 |
| PYSEC-2021-107 A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as… |
Not rated yet EPSS 0.33% |
< 1.2.2 | 1.2.2 |
| GHSA-f556-49jc-4rvc Ansible does not collect garbage after playbook run |
Medium EPSS 0.32% |
< 2.10.1 | 2.10.1 |
| GHSA-f556-49jc-4rvc Ansible does not collect garbage after playbook run |
Medium EPSS 0.32% |
< 2.10.1 | 2.10.1 |
| PYSEC-2020-221 A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Withdrawn |
Not rated yet | all versions | No fix yet |
| GHSA-m429-fhmv-c6q2 Improper Verification of Cryptographic Signature in ansible |
High EPSS 0.23% |
>= 2.9.0a1, < 2.9.13 | 2.9.13 |
| GHSA-m429-fhmv-c6q2 Improper Verification of Cryptographic Signature in ansible |
High EPSS 0.23% |
>= 2.8.0a1, < 2.8.15 | 2.8.15 |
| GHSA-m429-fhmv-c6q2 Improper Verification of Cryptographic Signature in ansible |
High EPSS 0.23% |
>= 2.8.0, < 2.8.16rc1>= 2.9.0, < 2.9.14rc1 | 2.8.16rc12.9.14rc1 |
| GHSA-j667-c2hm-f2wp Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible |
Medium EPSS 0.41% |
< 2.8.14 | 2.8.14 |
| GHSA-785x-qw4v-6872 Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible |
Medium EPSS 0.57% |
< 2.10.0 | 2.10.0 |
| GHSA-785x-qw4v-6872 Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible |
Medium EPSS 0.57% |
< 2.10.0 | 2.10.0 |
| GHSA-j667-c2hm-f2wp Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible |
Medium EPSS 0.41% |
>= 2.8.0, < 2.8.14>= 2.9.0, < 2.9.12 | 2.8.142.9.12 |
| GHSA-j667-c2hm-f2wp Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible |
Medium EPSS 0.41% |
>= 2.10.0a1, < 2.10.1rc2 | 2.10.1rc2 |
| GHSA-j667-c2hm-f2wp Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible |
Medium EPSS 0.41% |
>= 2.9.0a1, < 2.9.12 | 2.9.12 |
| PYSEC-2020-180 A flaw was found in the solaris_zone module from the Ansible Community modules. Withdrawn |
Not rated yet | < 2.7.15>= 2.8.0, < 2.8.7>= 2.9.0, < 2.9.2 | 2.7.152.8.72.9.2 |
| GHSA-gwr8-5j83-483c OS Command Injection and Improper Input Validation in ansible |
High EPSS 0.42% |
< 2.7.16 | 2.7.16 |
| GHSA-gwr8-5j83-483c OS Command Injection and Improper Input Validation in ansible |
High EPSS 0.42% |
>= 2.8.0a1, < 2.8.8 | 2.8.8 |
| GHSA-gwr8-5j83-483c OS Command Injection and Improper Input Validation in ansible |
High EPSS 0.42% |
>= 2.9.0a1, < 2.9.3 | 2.9.3 |
| GHSA-gwr8-5j83-483c OS Command Injection and Improper Input Validation in ansible |
High EPSS 0.42% |
< 2.7.15>= 2.8.0, < 2.8.7>= 2.9.0, < 2.9.2 | 2.7.152.8.72.9.2 |
| GHSA-vp9j-rghq-8jhh Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.26% |
>= 2.7.0, < 2.8.0a1>= 2.8.0, < 2.8.13>= 2.9.0, < 2.9.10 | 2.8.0a12.8.132.9.10 |
| GHSA-vp9j-rghq-8jhh Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.26% |
>= 2.10.0a1, < 2.10.0rc1 | 2.10.0rc1 |
| GHSA-vp9j-rghq-8jhh Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.26% |
< 2.9.12 | 2.9.12 |
| GHSA-j2h6-73x8-22c4 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 0.39% |
>= 2.7.0, < 2.7.17>= 2.8.0, < 2.8.11>= 2.9.0, < 2.9.7 | 2.7.172.8.112.9.7 |
| GHSA-j2h6-73x8-22c4 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 0.39% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-j2h6-73x8-22c4 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 0.39% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-j2h6-73x8-22c4 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 0.39% |
>= 2.7.0a1, < 2.7.17 | 2.7.17 |
| GHSA-77g3-3j5w-64w4 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.7.0a1, < 2.7.17 | 2.7.17 |
| GHSA-77g3-3j5w-64w4 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-77g3-3j5w-64w4 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.7.0, < 2.7.17>= 2.8.0, < 2.8.11>= 2.9.0, < 2.9.7 | 2.7.172.8.112.9.7 |
| GHSA-77g3-3j5w-64w4 Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-3c67-gc48-983w Path Traversal in Ansible |
Medium EPSS 0.30% |
>= 2.9.0, < 2.9.7 | 2.9.7 |
| GHSA-3c67-gc48-983w Path Traversal in Ansible |
Medium EPSS 0.30% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-frxj-5j27-f8rf Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible |
Medium EPSS 0.71% |
>= 2.7.0, < 2.7.16>= 2.8.0, < 2.8.8>= 2.9.0, < 2.9.3 | 2.7.162.8.82.9.3 |
| GHSA-frxj-5j27-f8rf Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible |
Medium EPSS 0.71% |
>= 2.8.0a1, < 2.8.8 | 2.8.8 |
| GHSA-frxj-5j27-f8rf Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible |
Medium EPSS 0.71% |
>= 2.9.0a1, < 2.9.3 | 2.9.3 |
| GHSA-frxj-5j27-f8rf Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible |
Medium EPSS 0.71% |
>= 2.7.0a1, < 2.7.16 | 2.7.16 |
| GHSA-p62g-jhg6-v3rq Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible |
High EPSS 0.33% |
>= 2.7.0, < 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-p62g-jhg6-v3rq Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible |
High EPSS 0.33% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-p62g-jhg6-v3rq Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible |
High EPSS 0.33% |
>= 2.7.0a1, < 2.7.17 | 2.7.17 |
| GHSA-p62g-jhg6-v3rq Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible |
High EPSS 0.33% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-vcg8-98q8-g7mj Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-f85h-23mf-2fwh Argument Injection in Ansible |
Low EPSS 0.40% |
<= 2.7.16 | No fix yet |
| GHSA-f85h-23mf-2fwh Argument Injection in Ansible |
Low EPSS 0.40% |
>= 2.8.0a1, <= 2.8.10 | No fix yet |
| GHSA-f85h-23mf-2fwh Argument Injection in Ansible |
Low EPSS 0.40% |
>= 2.9.0a1, <= 2.9.6 | No fix yet |
| GHSA-f85h-23mf-2fwh Argument Injection in Ansible |
Low EPSS 0.40% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-gfr2-qpxh-qj9m Path Traversal in Ansible |
Medium EPSS 0.47% |
>= 2.7.0a1, < 2.7.18 | 2.7.18 |
| GHSA-gfr2-qpxh-qj9m Path Traversal in Ansible |
Medium EPSS 0.47% |
>= 2.8.0a1, < 2.8.12 | 2.8.12 |
| GHSA-gfr2-qpxh-qj9m Path Traversal in Ansible |
Medium EPSS 0.47% |
>= 2.9.0a1, < 2.9.8 | 2.9.8 |
| GHSA-gfr2-qpxh-qj9m Path Traversal in Ansible |
Medium EPSS 0.47% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-vcg8-98q8-g7mj Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
< 2.7.17 | 2.7.17 |
| GHSA-vcg8-98q8-g7mj Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-vcg8-98q8-g7mj Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible |
Medium EPSS 0.36% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-x7jh-595q-wq82 Incorrect Permission Assignment for Critical Resource in Ansible |
Low EPSS 0.40% |
>= 2.7.0, <= 2.10.0 | No fix yet |
| GHSA-x7jh-595q-wq82 Incorrect Permission Assignment for Critical Resource in Ansible |
Low EPSS 0.40% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-86hp-cj9j-33vv Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Medium EPSS 0.51% |
< 2.7.18>= 2.8.0, < 2.8.11>= 2.9.0, < 2.9.7 | 2.7.182.8.112.9.7 |
| GHSA-86hp-cj9j-33vv Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Medium EPSS 0.51% |
>= 2.7.0a1, < 2.7.18 | 2.7.18 |
| GHSA-86hp-cj9j-33vv Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Medium EPSS 0.51% |
>= 2.8.0a1, < 2.8.12 | 2.8.12 |
| GHSA-86hp-cj9j-33vv Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Medium EPSS 0.51% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-923p-fr2c-g5m2 Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Low EPSS 0.36% |
< 2.7.17 | 2.7.17 |
| GHSA-923p-fr2c-g5m2 Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Low EPSS 0.36% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-923p-fr2c-g5m2 Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Low EPSS 0.36% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-923p-fr2c-g5m2 Exposure of Sensitive Information to an Unauthorized Actor in Ansible |
Low EPSS 0.36% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-g4mq-6fp5-qwcf Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File |
Medium EPSS 0.40% |
< 2.7.17>= 2.8.0, < 2.8.8>= 2.9.0, < 2.9.6 | 2.7.172.8.82.9.6 |
| GHSA-g4mq-6fp5-qwcf Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File |
Medium EPSS 0.40% |
>= 2.9.0a1, < 2.9.7 | 2.9.7 |
| GHSA-g4mq-6fp5-qwcf Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File |
Medium EPSS 0.40% |
>= 2.8.0a1, < 2.8.11 | 2.8.11 |
| GHSA-g4mq-6fp5-qwcf Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File |
Medium EPSS 0.40% |
< 2.7.17 | 2.7.17 |
| GHSA-893h-35v4-mxqx Path Traversal in Ansible |
High EPSS 0.36% |
< 2.7.17>= 2.8.0, < 2.8.9>= 2.9.0, < 2.9.6 | 2.7.172.8.92.9.6 |
| GHSA-893h-35v4-mxqx Path Traversal in Ansible |
High EPSS 0.36% |
>= 2.8.0a1, < 2.8.9 | 2.8.9 |
| GHSA-893h-35v4-mxqx Path Traversal in Ansible |
High EPSS 0.36% |
>= 2.9.0a1, < 2.9.6 | 2.9.6 |
| GHSA-893h-35v4-mxqx Path Traversal in Ansible |
High EPSS 0.36% |
< 2.7.17 | 2.7.17 |
| GHSA-h39q-95q5-9jfp OS Command Injection in ansible |
High EPSS 0.46% |
< 2.8.13 | 2.8.13 |
| GHSA-h39q-95q5-9jfp OS Command Injection in ansible |
High EPSS 0.46% |
>= 2.10.0a1, < 2.10.0rc1 | 2.10.0rc1 |
| GHSA-h39q-95q5-9jfp OS Command Injection in ansible |
High EPSS 0.46% |
>= 2.9.0a1, < 2.9.11 | 2.9.11 |
| GHSA-h39q-95q5-9jfp OS Command Injection in ansible |
High EPSS 0.46% |
< 2.7.17 | 2.7.17 |
| GHSA-qg47-5px9-32g7 Ansible Remote Code Execution |
Critical EPSS 4.43% |
< 1.5.4 | 1.5.4 |
| GHSA-5g4v-2pc6-4hh4 Ansible Sensitive Files Are Locally Readable |
Medium EPSS 0.42% |
< 1.5.5 | 1.5.5 |
| GHSA-5g4v-2pc6-4hh4 Ansible Sensitive Files Are Locally Readable |
Medium EPSS 0.42% |
< 1.5.5 | 1.5.5 |
| GHSA-6667-f46p-pg88 Ansible sets unsafe permissions for sources.list |
Medium EPSS 0.36% |
< 1.5.5 | 1.5.5 |
| GHSA-6667-f46p-pg88 Ansible sets unsafe permissions for sources.list |
Medium EPSS 0.36% |
< 1.5.5 | 1.5.5 |
| GHSA-qg47-5px9-32g7 Ansible Remote Code Execution |
Critical EPSS 4.43% |
< 1.5.4 | 1.5.4 |
| GHSA-5xm4-jmpw-p6j3 Ansible discloses credential information |
Medium EPSS 0.38% |
< 1.5.5 | 1.5.5 |
| GHSA-66c7-5pwv-mm3j Ansible Code Injection Vulnerability |
Critical EPSS 5.24% |
< 1.6.4 | 1.6.4 |
| GHSA-66c7-5pwv-mm3j Ansible Code Injection Vulnerability |
Critical EPSS 5.24% |
< 1.6.4 | 1.6.4 |
| GHSA-5xm4-jmpw-p6j3 Ansible discloses credential information |
Medium EPSS 0.38% |
< 1.5.5 | 1.5.5 |
| GHSA-wqq5-c89p-3wc3 Ansible Arbitrary Code Execution |
Critical EPSS 3.55% |
< 1.6.7 | 1.6.7 |
| GHSA-64cw-m57j-65xj Ansible Arbitrary Code Execution |
Critical EPSS 3.55% |
< 1.6.7 | 1.6.7 |
| GHSA-64cw-m57j-65xj Ansible Arbitrary Code Execution |
Critical EPSS 3.55% |
< 1.6.7 | 1.6.7 |
| GHSA-wqq5-c89p-3wc3 Ansible Arbitrary Code Execution |
Critical EPSS 3.55% |
< 1.6.7 | 1.6.7 |
| GHSA-49m5-2838-q2rv Ansible unsafe evaluation of some strings |
High EPSS 1.19% |
< 1.5.4 | 1.5.4 |
| GHSA-49m5-2838-q2rv Ansible unsafe evaluation of some strings |
High EPSS 1.19% |
< 1.5.4 | 1.5.4 |
| PYSEC-2020-179 Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when… Withdrawn |
Not rated yet | >= 2.7.0, < 2.7.15>= 2.8.0, < 2.8.7>= 2.9.0, < 2.9.1 | 2.7.152.8.72.9.1 |
| GHSA-3m93-m4q6-mc6v Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible |
Medium EPSS 1.87% |
>= 2.7.0a1, < 2.7.15 | 2.7.15 |
| GHSA-3m93-m4q6-mc6v Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible |
Medium EPSS 1.87% |
>= 2.7.0, < 2.7.15>= 2.8.0, < 2.8.7>= 2.9.0, < 2.9.1 | 2.7.152.8.72.9.1 |
| GHSA-3m93-m4q6-mc6v Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible |
Medium EPSS 1.87% |
>= 2.8.0a1, < 2.8.7 | 2.8.7 |
| GHSA-3m93-m4q6-mc6v Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible |
Medium EPSS 1.87% |
>= 2.9.0a1, < 2.9.1 | 2.9.1 |
| GHSA-6fq2-x65v-v9h7 Ansible password prompts could expose passwords |
Medium EPSS 1.66% |
>= 2.7.0, < 2.7.14 | 2.7.14 |
| GHSA-6fq2-x65v-v9h7 Ansible password prompts could expose passwords |
Medium EPSS 1.66% |
>= 2.6.0, < 2.6.20>= 2.7.0, < 2.7.14>= 2.8.0, < 2.8.6 | 2.6.202.7.142.8.6 |
| GHSA-6fq2-x65v-v9h7 Ansible password prompts could expose passwords |
Medium EPSS 1.66% |
>= 2.8.0, < 2.8.6 | 2.8.6 |
| GHSA-6fq2-x65v-v9h7 Ansible password prompts could expose passwords |
Medium EPSS 1.66% |
>= 2.6.0, < 2.6.20 | 2.6.20 |
| PYSEC-2019-73 A flaw was found in ansible 2.8.0 before 2.8.4. Withdrawn |
Not rated yet | >= 2.8.0, < 2.8.4 | 2.8.4 |
| GHSA-p75j-wc34-527c Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.87% |
>= 2.8.0a1, < 2.8.4 | 2.8.4 |
| GHSA-p75j-wc34-527c Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.87% |
>= 2.8.0, < 2.8.4 | 2.8.4 |
| GHSA-cqmr-rcpr-cxh3 Ansible password prompts could expose passwords |
Medium EPSS 1.52% |
>= 2.7.0, < 2.7.13 | 2.7.13 |
| GHSA-cqmr-rcpr-cxh3 Ansible password prompts could expose passwords |
Medium EPSS 1.52% |
>= 2.6.0, < 2.6.19 | 2.6.19 |
| GHSA-cqmr-rcpr-cxh3 Ansible password prompts could expose passwords |
Medium EPSS 1.52% |
>= 2.8.0, < 2.8.4 | 2.8.4 |
| GHSA-cqmr-rcpr-cxh3 Ansible password prompts could expose passwords |
Medium EPSS 1.52% |
>= 2.6.0, < 2.6.19>= 2.7.0, < 2.7.13>= 2.8.0, < 2.8.4 | 2.6.192.7.132.8.4 |
| GHSA-h653-95qw-h2mp Ansible leaks sensitive information to logs when told not to |
Medium EPSS 0.42% |
>= 2.9.0a1, < 2.9.0rc4 | 2.9.0rc4 |
| GHSA-h653-95qw-h2mp Ansible leaks sensitive information to logs when told not to |
Medium EPSS 0.42% |
>= 2.7.0a1, < 2.7.14 | 2.7.14 |
| GHSA-h653-95qw-h2mp Ansible leaks sensitive information to logs when told not to |
Medium EPSS 0.42% |
>= 2.0, < 2.6.20 | 2.6.20 |
| GHSA-h653-95qw-h2mp Ansible leaks sensitive information to logs when told not to |
Medium EPSS 0.42% |
>= 2.0, < 2.8.1 | 2.8.1 |
| GHSA-h653-95qw-h2mp Ansible leaks sensitive information to logs when told not to |
Medium EPSS 0.42% |
>= 2.8.0a1, < 2.8.6 | 2.8.6 |
| GHSA-pm48-cvv2-29q5 Ansible Uses Plugins That Disclose Credentials |
High EPSS 0.51% |
< 2.6.20>= 2.7.0, < 2.7.14>= 2.8.0, < 2.8.6 | 2.6.202.7.142.8.6 |
| GHSA-pm48-cvv2-29q5 Ansible Uses Plugins That Disclose Credentials |
High EPSS 0.51% |
>= 2.7.0a1, < 2.7.14 | 2.7.14 |
| GHSA-pm48-cvv2-29q5 Ansible Uses Plugins That Disclose Credentials |
High EPSS 0.51% |
>= 2.8.0a1, < 2.8.6 | 2.8.6 |
| PYSEC-2019-74 In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to… Withdrawn |
Not rated yet | < 2.6.20>= 2.7.0, < 2.7.14>= 2.8.0, < 2.8.6 | 2.6.202.7.142.8.6 |
| GHSA-pm48-cvv2-29q5 Ansible Uses Plugins That Disclose Credentials |
High EPSS 0.51% |
< 2.6.20 | 2.6.20 |
| GHSA-grgm-pph5-j5h7 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.77% |
< 2.6.18>= 2.7.0, < 2.7.12>= 2.8.0, < 2.8.2 | 2.6.182.7.122.8.2 |
| GHSA-grgm-pph5-j5h7 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.77% |
< 2.6.18 | 2.6.18 |
| GHSA-grgm-pph5-j5h7 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.77% |
>= 2.7.0a1, < 2.7.12 | 2.7.12 |
| GHSA-grgm-pph5-j5h7 Exposure of Sensitive Information to an Unauthorized Actor in ansible |
Medium EPSS 1.77% |
>= 2.8.0a1, < 2.8.2 | 2.8.2 |
| PYSEC-2019-72 A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information… Withdrawn |
Not rated yet | < 2.6.18>= 2.7.0, < 2.7.12>= 2.8.0, < 2.8.2 | 2.6.182.7.122.8.2 |
| GHSA-74vq-h4q8-x6jv Ansible Path Traversal vulnerability |
Medium EPSS 0.53% |
>= 2.6.0a1, < 2.6.14 | 2.6.14 |
| GHSA-74vq-h4q8-x6jv Ansible Path Traversal vulnerability |
Medium EPSS 0.53% |
>= 2.7.0a1, < 2.7.8 | 2.7.8 |
| GHSA-74vq-h4q8-x6jv Ansible Path Traversal vulnerability |
Medium EPSS 0.53% |
>= 2.5.0, < 2.5.15>= 2.6.0, < 2.6.14>= 2.7.0, < 2.7.8 | 2.5.152.6.142.7.8 |
| GHSA-74vq-h4q8-x6jv Ansible Path Traversal vulnerability |
Medium EPSS 0.53% |
< 2.5.15 | 2.5.15 |
| PYSEC-2019-75 Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the… Withdrawn |
Not rated yet | >= 2.5.0, < 2.5.15>= 2.6.0, < 2.6.14>= 2.7.0, < 2.7.8 | 2.5.152.6.142.7.8 |
| GHSA-j569-fghw-f9rx Ansible sensitive information disclosure |
Medium EPSS 2.48% |
>= 2.6.0a1, < 2.6.11 | 2.6.11 |
| GHSA-j569-fghw-f9rx Ansible sensitive information disclosure |
Medium EPSS 2.48% |
>= 2.7.0a1, < 2.7.5 | 2.7.5 |
| GHSA-j569-fghw-f9rx Ansible sensitive information disclosure |
Medium EPSS 2.48% |
>= 2.5.0, < 2.5.14>= 2.6.0, < 2.6.11>= 2.7.0, < 2.7.5 | 2.5.142.6.112.7.5 |
| GHSA-j569-fghw-f9rx Ansible sensitive information disclosure |
Medium EPSS 2.48% |
< 2.5.14 | 2.5.14 |
| GHSA-v735-2pp6-h86r Ansible Logs Passwords If PowerShell ScriptBlock is Enabled |
Medium EPSS 0.54% |
< 2.5.12 | 2.5.12 |
| GHSA-v735-2pp6-h86r Ansible Logs Passwords If PowerShell ScriptBlock is Enabled |
Medium EPSS 0.54% |
>= 2.6.0a1, < 2.6.9 | 2.6.9 |
| GHSA-v735-2pp6-h86r Ansible Logs Passwords If PowerShell ScriptBlock is Enabled |
Medium EPSS 0.54% |
>= 2.7.0, < 2.7.4>= 2.7.5, < 2.8.1< 2.5.13>= 2.6.0, < 2.6.10 | 2.5.132.6.102.7.42.8.1 |
| GHSA-v735-2pp6-h86r Ansible Logs Passwords If PowerShell ScriptBlock is Enabled |
Medium EPSS 0.54% |
>= 2.7.0a1, < 2.7.3 | 2.7.3 |
| GHSA-hwrm-63v2-42g4 Ansible Leaks Data Passed to ssh-keygen |
High EPSS 0.36% |
< 2.5.11 | 2.5.11 |
| GHSA-hwrm-63v2-42g4 Ansible Leaks Data Passed to ssh-keygen |
High EPSS 0.36% |
>= 2.7.0a1, < 2.7.1 | 2.7.1 |
| GHSA-hwrm-63v2-42g4 Ansible Leaks Data Passed to ssh-keygen |
High EPSS 0.36% |
>= 2.7, < 2.7.1>= 2.6, < 2.6.7< 2.5.11 | 2.5.112.6.72.7.1 |
| GHSA-hwrm-63v2-42g4 Ansible Leaks Data Passed to ssh-keygen |
High EPSS 0.36% |
>= 2.6.0a1, < 2.6.7 | 2.6.7 |
| GHSA-cmwx-9m2h-x7v4 Ansible apt_key module does not properly verify key fingerprint |
High EPSS 2.46% |
< 2.2.0.0 | 2.2.0.0 |
| GHSA-cmwx-9m2h-x7v4 Ansible apt_key module does not properly verify key fingerprint |
High EPSS 2.46% |
< 2.2.0.0 | 2.2.0.0 |
| GHSA-jg4f-jqm5-4mgq Ansible fails to properly sanitize fact variables sent from the Ansible controller |
Critical EPSS 3.21% |
< 2.2.0.0 | 2.2.0.0 |
| GHSA-jg4f-jqm5-4mgq Ansible fails to properly sanitize fact variables sent from the Ansible controller |
Critical EPSS 3.21% |
< 2.2.0.0 | 2.2.0.0 |
| GHSA-x4cm-m36h-c6qj Improper Input Validation in ansible |
Medium EPSS 1.44% |
< 2.2.1.0 | 2.2.1.0 |
| GHSA-x4cm-m36h-c6qj Improper Input Validation in ansible |
Medium EPSS 1.44% |
< 2.2.1.0 | 2.2.1.0 |
| GHSA-w578-j992-554x Ansible fails to properly mark lookup-plugin results as unsafe |
Critical EPSS 4.78% |
>= 2.3.0.0, < 2.3.1.0 | 2.3.1.0 |
| GHSA-w578-j992-554x Ansible fails to properly mark lookup-plugin results as unsafe |
Critical EPSS 4.78% |
>= 2.2.0.0, < 2.2.3.0 | 2.2.3.0 |
| GHSA-w578-j992-554x Ansible fails to properly mark lookup-plugin results as unsafe |
Critical EPSS 4.78% |
< 2.1.6.0 | 2.1.6.0 |
| GHSA-w578-j992-554x Ansible fails to properly mark lookup-plugin results as unsafe |
Critical EPSS 4.78% |
< 2.3.1.0>= 2.3.2.0, < 2.4.0.0 | 2.3.1.02.4.0.0 |
| GHSA-fc4h-467w-46rh Ansible Arbitrary Code Execution |
High EPSS 0.59% |
< 2.4.6.0 | 2.4.6.0 |
| GHSA-fc4h-467w-46rh Ansible Arbitrary Code Execution |
High EPSS 0.59% |
>= 2.5, < 2.5.6>= 2.4, < 2.4.6.0>= 2.6, < 2.6.1 | 2.4.6.02.5.62.6.1 |
| GHSA-fc4h-467w-46rh Ansible Arbitrary Code Execution |
High EPSS 0.59% |
>= 2.6.0a1, < 2.6.1 | 2.6.1 |
| GHSA-fc4h-467w-46rh Ansible Arbitrary Code Execution |
High EPSS 0.59% |
>= 2.5.0a1, < 2.5.6 | 2.5.6 |
| GHSA-jwcc-j78w-j73w Ansible exposes sensitive data in log files and on the terminal |
Medium EPSS 3.11% |
>= 2.5, < 2.5.5>= 2.4, < 2.4.5.0 | 2.4.5.02.5.5 |
| GHSA-jwcc-j78w-j73w Ansible exposes sensitive data in log files and on the terminal |
Medium EPSS 3.11% |
>= 2.4.0.0, < 2.4.5.0 | 2.4.5.0 |
| GHSA-jwcc-j78w-j73w Ansible exposes sensitive data in log files and on the terminal |
Medium EPSS 3.11% |
>= 2.5.0a1, < 2.5.5 | 2.5.5 |
| GHSA-3xvg-x47j-x75w Ansible Improper Input Validation vulnerability |
High EPSS 0.49% |
>= 2.5, < 2.5.6 | 2.5.6 |
| GHSA-3xvg-x47j-x75w Ansible Improper Input Validation vulnerability |
High EPSS 0.49% |
>= 2.6, < 2.6.1 | 2.6.1 |
| GHSA-3xvg-x47j-x75w Ansible Improper Input Validation vulnerability |
High EPSS 0.49% |
< 2.4.6.0>= 2.5, < 2.5.6>= 2.6, < 2.6.1 | 2.4.6.02.5.62.6.1 |
| GHSA-3xvg-x47j-x75w Ansible Improper Input Validation vulnerability |
High EPSS 0.49% |
< 2.4.6.0 | 2.4.6.0 |
| GHSA-3m8p-xpm6-8ww3 Ansible Arbitrary Code Execution |
High EPSS 3.03% |
< 2.2.3.0 | 2.2.3.0 |
| GHSA-3m8p-xpm6-8ww3 Ansible Arbitrary Code Execution |
High EPSS 3.03% |
< 2.3.0.0 | 2.3.0.0 |
| GHSA-9x6q-5423-w5v9 Ansible fails to cache SSH host keys |
High EPSS 1.90% |
< 1.2.1 | 1.2.1 |
| GHSA-9x6q-5423-w5v9 Ansible fails to cache SSH host keys |
High EPSS 1.90% |
< 1.2.1 | 1.2.1 |
| GHSA-m956-frf4-m2wr Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems |
High EPSS 17.14% |
>= 2.2.0.0, < 2.2.1.0 | 2.2.1.0 |
| GHSA-m956-frf4-m2wr Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems |
High EPSS 17.14% |
< 2.1.4.0>= 2.2.0.0, < 2.2.1.0 | 2.1.4.02.2.1.0 |
| GHSA-m956-frf4-m2wr Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems |
High EPSS 17.14% |
< 2.1.4.0 | 2.1.4.0 |
| GHSA-588w-w6mv-3cw5 Ansible Insertion of Sensitive Information into Log File vulnerability |
Critical EPSS 3.56% |
>= 2.3.0.0, < 2.3.3.0 | 2.3.3.0 |
| GHSA-588w-w6mv-3cw5 Ansible Insertion of Sensitive Information into Log File vulnerability |
Critical EPSS 3.56% |
>= 2.4.0.0, < 2.4.1.0 | 2.4.1.0 |
| GHSA-588w-w6mv-3cw5 Ansible Insertion of Sensitive Information into Log File vulnerability |
Critical EPSS 3.56% |
>= 2.3.0.0, < 2.3.3.0>= 2.4.0.0, < 2.4.1.0 | 2.3.3.02.4.1.0 |
| GHSA-4cvm-5776-jx9f Ansible Arbitrary Code Execution |
High EPSS 2.52% |
< 1.6.6 | 1.6.6 |
| GHSA-4cvm-5776-jx9f Ansible Arbitrary Code Execution |
High EPSS 2.52% |
< 1.6.6 | 1.6.6 |
| GHSA-wwwh-47wp-m522 Ansible Sandbox Escape via Symlink Attack |
High EPSS 0.45% |
< 1.9.2 | 1.9.2 |
| GHSA-wwwh-47wp-m522 Ansible Sandbox Escape via Symlink Attack |
High EPSS 0.45% |
< 1.9.2 | 1.9.2 |
| GHSA-rh6x-qvg7-rrmj Link Following in ansible |
High EPSS 0.47% |
< 2.0.2.0 | 2.0.2.0 |
| GHSA-rh6x-qvg7-rrmj Link Following in ansible |
High EPSS 0.47% |
>= 2.0.0.0, < 2.0.2.0 | 2.0.2.0 |
| GHSA-rh6x-qvg7-rrmj Link Following in ansible |
High EPSS 0.47% |
< 1.9.6.1 | 1.9.6.1 |
| GHSA-w64c-pxjj-h866 Ansible does not verify that the server hostname matches a domain name in certificates |
High EPSS 0.95% |
< 1.9.2 | 1.9.2 |
| GHSA-w64c-pxjj-h866 Ansible does not verify that the server hostname matches a domain name in certificates |
High EPSS 0.95% |
< 1.9.2 | 1.9.2 |
| GHSA-pcqv-c46v-2p4v Ansible Arbitrary File Overwrite Vulnerability |
Medium EPSS 0.33% |
>= 1.2.0, < 1.2.3 | 1.2.3 |
| GHSA-pcqv-c46v-2p4v Ansible Arbitrary File Overwrite Vulnerability |
Medium EPSS 0.33% |
>= 1.2, < 1.2.3 | 1.2.3 |
| GHSA-fj24-ghp9-39v3 Ansible uses a socket with predictable filename in /tmp |
Medium EPSS 0.34% |
< 1.2.3 | 1.2.3 |
| GHSA-fj24-ghp9-39v3 Ansible uses a socket with predictable filename in /tmp |
Medium EPSS 0.34% |
< 1.2.3 | 1.2.3 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor