HIGH7.1PyPI
GHSA-2pfh-q76x-gwvm· CVE-2021-3583, PYSEC-2021-358Improper Input Validation and Command Injection in Ansible
Modified: 9/6/2024
package
PyPI/ansible
pkg:pypi/ansible
MEDIUM5.2PyPI
GHSA-3c67-gc48-983w· CVE-2020-10691, PYSEC-2020-2Path Traversal in Ansible
Modified: 9/4/2024
HIGH8.0PyPI
GHSA-3m8p-xpm6-8ww3· CVE-2017-7466, PYSEC-2018-40Ansible Arbitrary Code Execution
Modified: 9/3/2024
MEDIUM6.5PyPI
GHSA-3m93-m4q6-mc6v· CVE-2019-14864, PYSEC-2020-160Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
Modified: 9/4/2024
HIGH7.8PyPI
GHSA-3xvg-x47j-x75w· CVE-2018-10874, PYSEC-2018-81Ansible Improper Input Validation vulnerability
Modified: 9/9/2024
HIGH7.5PyPI
GHSA-49m5-2838-q2rv· CVE-2014-2686, PYSEC-2020-198Ansible unsafe evaluation of some strings
Modified: 2/19/2025
HIGH8.8PyPI
GHSA-4cvm-5776-jx9f· CVE-2014-3498, PYSEC-2017-2Ansible Arbitrary Code Execution
Modified: 9/3/2024
MEDIUM5.5PyPI
GHSA-4r65-35qq-ch8j· CVE-2021-3620, PYSEC-2022-164Ansible discloses sensitive information in traceback error message
Modified: 2/22/2026
CRITICAL9.8PyPI
GHSA-588w-w6mv-3cw5· CVE-2017-7550, PYSEC-2017-4Ansible Insertion of Sensitive Information into Log File vulnerability
Modified: 9/4/2024
MEDIUM5.5PyPI
GHSA-5g4v-2pc6-4hh4· CVE-2014-4658, PYSEC-2020-200Ansible Sensitive Files Are Locally Readable
Modified: 2/17/2025
HIGH7.5PyPI
GHSA-5rrg-rr89-x9mv· CVE-2021-20228, PYSEC-2021-1Ansible Exposes Sensitive Information
Modified: 9/9/2024
MEDIUM5.5PyPI
GHSA-5xm4-jmpw-p6j3· CVE-2014-4660, PYSEC-2020-202Ansible discloses credential information
Modified: 9/10/2024
CRITICAL9.8PyPI
GHSA-64cw-m57j-65xj· CVE-2014-4967, PYSEC-2020-205Ansible Arbitrary Code Execution
Modified: 9/10/2024
MEDIUM5.5PyPI
GHSA-6667-f46p-pg88· CVE-2014-4659, PYSEC-2020-201Ansible sets unsafe permissions for sources.list
Modified: 9/10/2024
CRITICAL9.8PyPI
GHSA-66c7-5pwv-mm3j· CVE-2014-4678, PYSEC-2020-203Ansible Code Injection Vulnerability
Modified: 9/10/2024
MEDIUM6.5PyPI
GHSA-6fq2-x65v-v9h7· CVE-2019-14856, PYSEC-2019-146Ansible password prompts could expose passwords
Modified: 11/24/2024
MEDIUM4.2PyPI
GHSA-74vq-h4q8-x6jv· CVE-2019-3828, PYSEC-2019-5Ansible Path Traversal vulnerability
Modified: 11/27/2024
MEDIUM5.5PyPI
GHSA-77g3-3j5w-64w4· CVE-2020-10685, PYSEC-2020-1Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Modified: 9/6/2024
MEDIUM5.5PyPI
GHSA-785x-qw4v-6872· CVE-2020-14330, PYSEC-2020-3Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
Modified: 9/5/2024
MEDIUM5.5PyPI
GHSA-86hp-cj9j-33vv· CVE-2020-1753, PYSEC-2020-210Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Modified: 9/9/2024
HIGH7.8PyPI
GHSA-893h-35v4-mxqx· CVE-2020-1737, PYSEC-2020-9Path Traversal in Ansible
Modified: 9/6/2024
MEDIUM5.5PyPI
GHSA-8f4m-hccc-8qph· CVE-2021-20191, PYSEC-2021-124Insertion of Sensitive Information into Log File in ansible
Modified: 9/10/2024
MEDIUM5.5PyPI
GHSA-8ggh-xwr9-3373· CVE-2025-14010, PYSEC-2026-1119Ansible Community General Collection is vulnerable to exposure of sensitive information
Modified: 7/7/2026
LOW3.9PyPI
GHSA-923p-fr2c-g5m2· CVE-2020-1739, PYSEC-2020-11Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Modified: 9/6/2024
HIGH7.4PyPI
GHSA-9x6q-5423-w5v9· CVE-2013-2233, PYSEC-2018-36Ansible fails to cache SSH host keys
Modified: 12/6/2024
HIGH7.5PyPI
GHSA-cmwx-9m2h-x7v4· CVE-2016-8614, PYSEC-2018-37Ansible apt_key module does not properly verify key fingerprint
Modified: 9/3/2024
HIGH7.5PyPI
GHSA-cpx3-93w7-457x· CVE-2022-3697, PYSEC-2026-768Ansible leaks password to logs
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-cqmr-rcpr-cxh3· CVE-2019-10206, PYSEC-2019-145Ansible password prompts could expose passwords
Modified: 11/25/2024
MEDIUM5.0PyPI
GHSA-f556-49jc-4rvc· CVE-2020-25635, PYSEC-2020-220Ansible does not collect garbage after playbook run
Modified: 10/31/2025
LOW3.9PyPI
GHSA-f85h-23mf-2fwh· CVE-2020-1738, PYSEC-2020-10Argument Injection in Ansible
Modified: 9/6/2024
HIGH7.8PyPI
GHSA-fc4h-467w-46rh· CVE-2018-10875, PYSEC-2018-43Ansible Arbitrary Code Execution
Modified: 9/5/2024
MEDIUM5.5PyPI
GHSA-fh5v-5f35-2rv2· CVE-2021-20180, PYSEC-2026-618Insertion of Sensitive Information into Log File in ansible
Modified: 7/6/2026
MEDIUM4.0PyPI
GHSA-fj24-ghp9-39v3· CVE-2013-4259, PYSEC-2013-1Ansible uses a socket with predictable filename in /tmp
Modified: 9/4/2024
MEDIUM5.6PyPI
GHSA-frxj-5j27-f8rf· CVE-2019-14905, PYSEC-2020-206Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
Modified: 11/25/2024
MEDIUM5.0PyPI
GHSA-g4mq-6fp5-qwcf· CVE-2020-1733, PYSEC-2020-5Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Modified: 11/27/2024
MEDIUM4.6PyPI
GHSA-gfr2-qpxh-qj9m· CVE-2020-1735, PYSEC-2020-7Path Traversal in Ansible
Modified: 9/9/2024
MEDIUM5.4PyPI
GHSA-grgm-pph5-j5h7· CVE-2019-10156, PYSEC-2019-2Exposure of Sensitive Information to an Unauthorized Actor in ansible
Modified: 9/4/2024
HIGH7.3PyPI
GHSA-gwr8-5j83-483c· CVE-2019-14904, PYSEC-2020-161OS Command Injection and Improper Input Validation in ansible
Modified: 9/6/2024
HIGH7.4PyPI
GHSA-h39q-95q5-9jfp· CVE-2020-1734, PYSEC-2020-6OS Command Injection in ansible
Modified: 9/10/2024
MEDIUM5.5PyPI
GHSA-h653-95qw-h2mp· CVE-2019-14858, PYSEC-2019-171Ansible leaks sensitive information to logs when told not to
Modified: 9/10/2024
HIGH7.8PyPI
GHSA-hwrm-63v2-42g4· CVE-2018-16837, PYSEC-2018-44Ansible Leaks Data Passed to ssh-keygen
Modified: 9/4/2024
MEDIUM5.0PyPI
GHSA-j2h6-73x8-22c4· CVE-2020-1746, PYSEC-2020-13Exposure of Sensitive Information to an Unauthorized Actor in ansible
Modified: 9/11/2024
MEDIUM5.3PyPI
GHSA-j569-fghw-f9rx· CVE-2018-16876, PYSEC-2019-141Ansible sensitive information disclosure
Modified: 11/21/2024
MEDIUM5.5PyPI
GHSA-j667-c2hm-f2wp· CVE-2020-14332, PYSEC-2020-4Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Modified: 9/5/2024
CRITICAL9.1PyPI
GHSA-jg4f-jqm5-4mgq· CVE-2016-8628, PYSEC-2018-38Ansible fails to properly sanitize fact variables sent from the Ansible controller
Modified: 9/4/2024
MEDIUM6.3PyPI
GHSA-jpvw-p8pr-9g2x· CVE-2023-5115, PYSEC-2026-1120Ansible symlink attack vulnerability
Modified: 7/7/2026
MEDIUM5.9PyPI
GHSA-jwcc-j78w-j73w· CVE-2018-10855, PYSEC-2018-42Ansible exposes sensitive data in log files and on the terminal
Modified: 11/25/2024
HIGH7.1PyPI
GHSA-m429-fhmv-c6q2· CVE-2020-14365, PYSEC-2020-209Improper Verification of Cryptographic Signature in ansible
Modified: 11/27/2024
HIGH8.1PyPI
GHSA-m956-frf4-m2wr· CVE-2016-9587, PYSEC-2018-39Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Modified: 11/25/2024
HIGH7.1PyPI
GHSA-p62g-jhg6-v3rq· CVE-2020-10684, PYSEC-2020-207Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Modified: 11/27/2024
MEDIUM6.5PyPI
GHSA-p75j-wc34-527c· CVE-2019-10217, PYSEC-2019-3Exposure of Sensitive Information to an Unauthorized Actor in ansible
Modified: 11/25/2024
MEDIUM6.2PyPI
GHSA-pcqv-c46v-2p4v· CVE-2013-4260, PYSEC-2013-2Ansible Arbitrary File Overwrite Vulnerability
Modified: 9/4/2024
HIGH7.8PyPI
GHSA-pm48-cvv2-29q5· CVE-2019-14846, PYSEC-2019-4Ansible Uses Plugins That Disclose Credentials
Modified: 9/9/2024
CRITICAL9.8PyPI
GHSA-qg47-5px9-32g7· CVE-2014-4657, PYSEC-2020-199Ansible Remote Code Execution
Modified: 2/19/2025
MEDIUM5.0PyPI
GHSA-r6h7-5pq2-j77h· CVE-2020-10729, PYSEC-2021-105Insufficiently random values in Ansible
Modified: 9/10/2024
HIGH7.8PyPI
GHSA-rh6x-qvg7-rrmj· CVE-2016-3096, PYSEC-2016-1Link Following in ansible
Modified: 9/4/2024
MEDIUM4.4PyPI
GHSA-v735-2pp6-h86r· CVE-2018-16859, PYSEC-2018-60Ansible Logs Passwords If PowerShell ScriptBlock is Enabled
Modified: 9/4/2024
MEDIUM4.7PyPI
GHSA-vcg8-98q8-g7mj· CVE-2020-1740, PYSEC-2020-12Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Modified: 9/4/2024
MEDIUM5.0PyPI
GHSA-vp9j-rghq-8jhh· CVE-2020-10744, PYSEC-2020-208Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Modified: 11/20/2024
CRITICAL9.8PyPI
GHSA-w578-j992-554x· CVE-2017-7481, PYSEC-2018-41Ansible fails to properly mark lookup-plugin results as unsafe
Modified: 5/29/2025
HIGH7.5PyPI
GHSA-w64c-pxjj-h866· CVE-2015-3908, PYSEC-2015-1Ansible does not verify that the server hostname matches a domain name in certificates
Modified: 9/4/2024
CRITICAL9.8PyPI
GHSA-wqq5-c89p-3wc3· CVE-2014-4966, PYSEC-2020-204Ansible Arbitrary Code Execution
Modified: 9/10/2024
MEDIUM5.5PyPI
GHSA-wv5p-gmmv-wh9v· CVE-2021-20178, PYSEC-2021-106Insertion of Sensitive Information into Log File in ansible
Modified: 11/25/2024
HIGH7.8PyPI
GHSA-wwwh-47wp-m522· CVE-2015-6240, PYSEC-2017-3Ansible Sandbox Escape via Symlink Attack
Modified: 8/30/2024
MEDIUM4.9PyPI
GHSA-x4cm-m36h-c6qj· CVE-2016-8647, PYSEC-2018-58Improper Input Validation in ansible
Modified: 9/3/2024
LOW3.3PyPI
GHSA-x7jh-595q-wq82· CVE-2020-1736, PYSEC-2020-8Incorrect Permission Assignment for Critical Resource in Ansible
Modified: 11/22/2024
—PyPI
PYSEC-2013-1· CVE-2013-4259, GHSA-fj24-ghp9-39v3Modified: 6/10/2026
—PyPI
PYSEC-2013-2· CVE-2013-4260, GHSA-pcqv-c46v-2p4vModified: 6/10/2026
—PyPI
PYSEC-2015-1· CVE-2015-3908, GHSA-w64c-pxjj-h866Modified: 11/8/2023
—PyPI
PYSEC-2016-1· CVE-2016-3096, GHSA-rh6x-qvg7-rrmjModified: 11/8/2023
—PyPI
PYSEC-2017-2· CVE-2014-3498, GHSA-4cvm-5776-jx9fModified: 6/10/2026
—PyPI
PYSEC-2017-3· CVE-2015-6240, GHSA-wwwh-47wp-m522Modified: 6/10/2026
—PyPI
PYSEC-2017-4· CVE-2017-7550, GHSA-588w-w6mv-3cw5Modified: 6/10/2026
—PyPI
PYSEC-2018-36· CVE-2013-2233, GHSA-9x6q-5423-w5v9Modified: 11/8/2023
—PyPI
PYSEC-2018-37· CVE-2016-8614, GHSA-cmwx-9m2h-x7v4Modified: 11/8/2023
—PyPI
PYSEC-2018-38· CVE-2016-8628, GHSA-jg4f-jqm5-4mgqModified: 11/8/2023
—PyPI
PYSEC-2018-39· CVE-2016-9587, GHSA-m956-frf4-m2wrModified: 11/8/2023
—PyPI
PYSEC-2018-40· CVE-2017-7466, GHSA-3m8p-xpm6-8ww3Modified: 6/10/2026
—PyPI
PYSEC-2018-41· CVE-2017-7481, GHSA-w578-j992-554xModified: 11/8/2023
—PyPI
PYSEC-2018-42· CVE-2018-10855, GHSA-jwcc-j78w-j73wModified: 11/8/2023
—PyPI
PYSEC-2018-43· CVE-2018-10875, GHSA-fc4h-467w-46rhModified: 6/10/2026
—PyPI
PYSEC-2018-44· CVE-2018-16837, GHSA-hwrm-63v2-42g4Modified: 6/10/2026
—PyPI
PYSEC-2018-58· CVE-2016-8647, GHSA-x4cm-m36h-c6qjModified: 11/8/2023
—PyPI
PYSEC-2018-60· CVE-2018-16859, GHSA-v735-2pp6-h86rModified: 6/10/2026
—PyPI
PYSEC-2018-81· CVE-2018-10874, GHSA-3xvg-x47j-x75wModified: 6/10/2026
—PyPI
PYSEC-2019-141· CVE-2018-16876, GHSA-j569-fghw-f9rxModified: 6/10/2026
—PyPI
PYSEC-2019-145· CVE-2019-10206, GHSA-cqmr-rcpr-cxh3Modified: 6/10/2026
—PyPI
PYSEC-2019-146· CVE-2019-14856, GHSA-6fq2-x65v-v9h7Modified: 6/10/2026
—PyPI
PYSEC-2019-171· CVE-2019-14858, GHSA-h653-95qw-h2mpModified: 6/10/2026
—PyPI
PYSEC-2019-2· CVE-2019-10156, GHSA-grgm-pph5-j5h7Modified: 11/8/2023
—PyPI
PYSEC-2019-3· CVE-2019-10217, GHSA-p75j-wc34-527cModified: 11/8/2023
—PyPI
PYSEC-2019-4· CVE-2019-14846, GHSA-pm48-cvv2-29q5Modified: 6/10/2026
—PyPI
PYSEC-2019-5· CVE-2019-3828, GHSA-74vq-h4q8-x6jvModified: 11/8/2023
—PyPI
PYSEC-2020-1· CVE-2020-10685, GHSA-77g3-3j5w-64w4Modified: 11/8/2023
—PyPI
PYSEC-2020-10· CVE-2020-1738, GHSA-f85h-23mf-2fwhModified: 11/8/2023
—PyPI
PYSEC-2020-11· CVE-2020-1739, GHSA-923p-fr2c-g5m2Modified: 11/8/2023
—PyPI
PYSEC-2020-12· CVE-2020-1740, GHSA-vcg8-98q8-g7mjModified: 11/8/2023
—PyPI
PYSEC-2020-13· CVE-2020-1746, GHSA-j2h6-73x8-22c4Modified: 11/8/2023
—PyPI
PYSEC-2020-160· CVE-2019-14864, GHSA-3m93-m4q6-mc6vModified: 11/8/2023
—PyPI
PYSEC-2020-161· CVE-2019-14904, GHSA-gwr8-5j83-483cModified: 11/8/2023