Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi ansible Security Advisories

Loading...
High
GSA_kwCzR0hTQS1jcHgzLTkzdzctNDU3eM4AAvlf
Ansible leaks password to logs
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 1 year ago
High
GSA_kwCzR0hTQS01cnJnLXJyODkteDltds4AArM7
Ansible Exposes Sensitive Information
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS02NmM3LTVwd3YtbW0zas4AArAK
Ansible Code Injection Vulnerability
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS02ZnEyLXg2NXYtdjloN84AAiyz
Ansible password prompts could expose passwords
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1jcW1yLXJjcHItY3hoM84AAiwJ
Ansible password prompts could expose passwords
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS01eG00LWptcHctcDZqM84AAgXF
Ansible discloses credential information
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS01ZzR2LTJwYzYtNGhoNM4AAgXD
Ansible Sensitive Files Are Locally Readable
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS1xZzQ3LTVweDktMzJnN84AAgXC
Ansible Remote Code Execution
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
High
GSA_kwCzR0hTQS00OW01LTI4MzgtcTJyds4AAgUo
Ansible unsafe evaluation of some strings
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
High
GSA_kwCzR0hTQS00Y3ZtLTU3NzYtang5Zs4AAU8V
Ansible Arbitrary Code Execution
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Low
GSA_kwCzR0hTQS1wY3F2LWM0NnYtMnA0ds4AAU8C
Ansible Arbitrary File Overwrite Vulnerability
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
High
GSA_kwCzR0hTQS13d3doLTQ3d3AtbTUyMs4AATHG
Ansible Sandbox Escape via Symlink Attack
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
High
GSA_kwCzR0hTQS0zeHZnLXg0N2oteDc1d83uSg
Ansible Improper Input Validation vulnerability
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS01ODh3LXc2bXYtM2N3Nc3sUg
Ansible Insertion of Sensitive Information into Log File vulnerability
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1maDV2LTVmMzUtMnJ2Ms0zsQ
Insertion of Sensitive Information into Log File in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00cjY1LTM1cXEtY2g4as0wGw
Ansible discloses sensitive information in traceback error message
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4NXgtcXc0di02ODcy
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY4NWgtMjNtZi0yZndo
Argument Injection in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg3amgtNTk1cS13cTgy
Incorrect Permission Assignment for Critical Resource in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZwOWotcmdocS04amho
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo2NjctYzJobS1mMndw
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzOXEtOTVxNS05amZw
OS Command Injection in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1wNzVqLXdjMzQtNTI3Y80Wdg
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 2 years ago
High
GSA_kwCzR0hTQS0ycGZoLXE3NngtZ3d2bc0V9w
Improper Input Validation and Command Injection in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2aDctNXBxMi1qNzdo
Insufficiently random values in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd2NXAtZ21tdi13aDl2
Insertion of Sensitive Information into Log File in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmNG0taGNjYy04cXBo
Insertion of Sensitive Information into Log File in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0bXEtNmZwNS1xd2Nm
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyeGotNWoyNy1mOHJm
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNjNjctZ2M0OC05ODN3
Path Traversal in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3cjgtNWo4My00ODNj
OS Command Injection and Improper Input Validation in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00MjktZmhtdi1jNnEy
Improper Verification of Cryptographic Signature in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWoyaDYtNzN4OC0yMmM0
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg5M2gtMzV2NC1teHF4
Path Traversal in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZjZzgtOThxOC1nN21q
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2MmctamhnNi12M3Jx
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc3ZzMtM2o1dy02NHc0
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdmcjItcXB4aC1xajlt
Path Traversal in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg2aHAtY2o5ai0zM3Z2
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkyM3AtZnIyYy1nNW0y
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 2 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNtOTMtbTRxNi1tYzZ2
Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: almost 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdyZ20tcHBoNS1qNWg3
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0dnEtaDRxOC14Nmp2
Ansible Path Traversal vulnerability
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 4 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc2NGMtcHhqai1oODY2
Ansible does not verify that the server hostname matches a domain name in certificates
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJoNngtcXZnNy1ycm1q
Link Following in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl4NnEtNTQyMy13NXY5
Ansible fails to cache SSH host keys
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg0Y20tbTM2aC1jNnFq
Improper Input Validation in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNtd3gtOW0yaC14N3Y0
Ansible apt_key module does not properly verify key fingerprint
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp3Y2Mtajc4dy1qNzN3
Ansible exposes sensitive data in log files and on the terminal
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpnNGYtanFtNS00bWdx
Ansible fails to properly sanitize fact variables sent from the Ansible controller
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05NTYtZnJmNC1tMndy
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: about 5 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc1Nzgtajk5Mi01NTR4
Ansible fails to properly mark lookup-plugin results as unsafe
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 5 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMydzktNDhxYy1xcGo0
Code injection in ansible
Ecosystems: pypi
Packages: ansible
Source: GitHub Advisory Database
Published: over 5 years ago
Filter by Severity
Moderate 6,471 High 5,598 Critical 2,473 Low 816
Filter by Ecosystem
maven 4,754 npm 3,389 pypi 3,117 packagist 2,566 go 1,534 nuget 1,317 rubygems 802 cargo 704 swift 32 hex 25 actions 12 pub 8
Filter by Package
tensorflow 433 tensorflow-cpu 387 tensorflow-gpu 384 django 77 apache-airflow 65 ansible 53 rdiffweb 42 Pillow 40 apache-superset 39 plone 36 matrix-synapse 34 Plone 32 opencv-python 30 opencv-contrib-python 30 vyper 23 Django 16 langchain 15 modoboa 14 notebook 13 pyftpdlib 13 cobbler 13 nova 13 pillow 13 onionshare-cli 12 mlflow 12 cryptography 12 calibreweb 11 twisted 11 keystone 11 urllib3 11 OctoPrint 10 salt 10 kiwitcms 9 opencv-contrib-python-headless 9 opencv-python-headless 9 pyload-ng 9 glance 9 waitress 9 ethyca-fides 9 wagtail 9 Flask-AppBuilder 8 Zope 8 aiohttp 8 numpy 8 aubio 8 pysaml2 7 matrix-sydent 7 pip 7 paddlepaddle 7 jupyter-server 7 python-keystoneclient 7 swift 7 vantage6 7 lief 6 mailman 6 ipython 6 web2py 6 inventree 6 graphite-web 6 python-gnupg 6 Zope2 6 lxml 6 apache-airflow-providers-apache-hive 6 sentry 5 bleach 5 gradio 5 zope 5 keylime 5 pyspark 5 tuf 5 requests 5 feedparser 5 neutron 5 pgadmin4 5 Products.CMFPlone 5 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 starlette 4 aws-iot-device-sdk-v2 4 awsiotsdk 4 PyPDF2 4 Pygments 4 qutebrowser 4 httpie 4 omero-web 4 Flask-Security-Too 4 gerapy 4 Jinja2 4 bottle 4 label-studio 4 werkzeug 4 reportlab 4 markdown2 4 FreeTAKServer-UI 4 scrapy 4 nltk 4 horizon 4 saleor 4 nvflare 4 datasette 4 copyparty 3 flask 3 mayan-edms 3 pyyaml 3 indy-node 3 cinder 3 ray 3 keyring 3 mitmproxy 3 rsa 3 paramiko 3 io.grpc:grpc-protobuf 3 grpc 3 grpcio 3 localstack 3 pretix 3 wger 3 bitlyshortener 3 barbican 3 plone.app.theming 3 plone.supermodel 3 indico 3 plone.app.dexterity 3 plone.app.event 3 ujson 3 sickrage 3 Products.PluggableAuthService 3 ansible-runner 3 pyarrow 3 fava 3 yt-dlp 3 oauthenticator 3 pywasm3 3 ckan 3 roundup 3 GitPython 3 quokka 3 poetry 3 Weblate 3 slixmpp 3 trytond 3 django-helpdesk 3 mistune 3 jupyterhub 3 torchserve 3 apache-airflow-providers-apache-spark 3 tripleo-heat-templates 3 Werkzeug 3 ecdsa 3 nautobot 3 asyncua 3 protobuf 3 moin 3 ubi-reader 2 distributed 2 certifi 2 Products.CMFCore 2 tripleo-ansible 2 redis 2 parlai 2 apache-airflow-providers-apache-drill 2 cabot 2 google/protobuf 2 github.com/protocolbuffers/protobuf 2 html5lib 2 Google.Protobuf 2 org.apache.spark:spark-core 2 pandasai 2 guarddog 2 typed-ast 2 openzeppelin-cairo-contracts 2 python-apt 2 pyxdg 2 keystonemiddleware 2 Twisted 2 untangle 2 superset 2 binwalk 2 petl 2 plone.restapi 2 aws-encryption-sdk-cli 2 py 2 ryu 2 aiohttp-session 2 djblets 2 apache-submarine 2 markdown-it-py 2 apache-iotdb 2 CairoSVG 2 mercurial 2 pyjwt 2 apache-airflow-providers-google 2 apache-airflow-providers-apache-sqoop 2 flower 2 RestrictedPython 2 djangorestframework 2 autobahn 2 org.apache.spark:spark-parent_2.12 2 python-cjson 2 piccolo 2 Red-DiscordBot 2 red-arrow 2 logilab-common 2 openstack-heat 2 websockets 2 ansible-core 2 django-sendfile2 2 python-ldap 2 safeurl-python 2 Radicale 2 pypdf 2 ctx 2 snowflake-connector-python 2 pretalx 2 scancodeio 2 plone.app.contenttypes 2 setuptools 2 pytorch-lightning 2 kallithea 2 buildbot 2 starkbank-ecdsa 2 keycloak-httpd-client-install 2 simiki 2 FreeTAKServer 2 archivy 2 scout-browser 2 django-anymail 2 proteus 2 tornado 2 uvicorn 2 aws-encryption-sdk 2 django-unicorn 2 pikepdf 2 shuup 2 dompurify 2 pycrypto 2 bikeshed 2 wasm3 2 django-cms 2 asyncssh 2 mindsdb 2 python-libnmap 2 apache-airflow-providers-odbc 2 mako 2 in-toto 2 webargs 2 httplib2 2 pyopenssl 2 tlslite-ng 2 sqlparse 2 AccessControl 2 sanic 2 openapi-python-client 2 rpyc 2 wagtail-2fa 2 loguru 2 SQLAlchemy 2 aioxmpp 2 streamlit 2 python-swiftclient 1 Products.PasswordResetTool 1 feedgen 1 parso 1 tortoise-orm 1 easybuild-framework 1 com.google.protobuf:protobuf-java 1 xalpha 1 apache-airflow-providers-smtp 1 IPython 1 phoenix-ws 1 archivebox 1 dtale 1 oauthlib 1 autogluon.multimodal 1 openssl-src 1 torch 1 sqlfluff 1 hnswlib 1 tkvideoplayer 1 binderhub 1 marcador 1 admesh 1 scalyr-agent-2 1 tlslite 1 onefuzz 1 coderedcms 1 rpc.py 1 SOAPpy 1 com.google.protobuf:protobuf-parent 1 Beaker 1 suds 1 django-grappelli 1 apache-airflow-providers-microsoft-mssql 1 drf-jwt 1 octoprint 1 zbar 1 django-mfa2 1 clickhouse-driver 1 sqla-yaml-fixtures 1 exotel 1 jefferson 1