Vulnerabilities for ansible-core

First version without a known vulnerability: 2.21.1rc1

Details

• GHSA-w8p5-mx5w-cpqj2026-06-05

  ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution

  Fixed in: 2.16.19rc1, 2.18.18rc1, 2.19.11rc1, 2.20.7rc1, 2.21.1rc1

• GHSA-99w6-3xph-cx782024-11-12

  Ansible-Core vulnerable to content protections bypass

  Fixed in: 2.18.1rc1, 2.17.7rc1, 2.16.14rc1

• GHSA-32p4-gm2c-wmch2024-11-06

  ansible-core Incorrect Authorization vulnerability

  Fixed in: 2.14.18rc1, 2.15.13rc1, 2.16.13rc1, 2.17.6rc1, 2.18.0rc2

• GHSA-jpxc-vmjf-9fcj2024-09-16

  Ansible vulnerable to Insertion of Sensitive Information into Log File

  Fixed in: 2.17.6, 2.16.13

• GHSA-h24r-m9qc-pvpg2024-02-06

  Ansible-core information disclosure flaw

  Fixed in: 2.14.14, 2.16.3, 2.15.9, 2.14.4

• GHSA-7j69-qfc3-2fq92023-12-13

  Ansible template injection vulnerability

  Fixed in: 2.16.1, 2.15.8, 2.14.12

• GHSA-ww3m-ffrm-qvqv2023-10-04

  Ansible may expose private key