ansible-core
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-11079 | ≤ 2.18.0 | Ansible-core: unsafe tagging bypass via hostvars object in ansible-core | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-9902 | < 2.14.18rc1 ; 2.15.0b1 – < 2.15.13rc1 ; 2.16.0b1 – < 2.16.13rc1 ; … | Ansible-core: ansible-core user may read/write unauthorized content | MEDIUM 6.3 | 0.3 % | ||
| CVE-2024-8775 | 1.0.0 – 2.17.4 | Ansible-core: exposure of sensitive information in ansible vault files due to improper logging | MEDIUM 5.5 | 0.3 % |