{"id":"CVE-2023-5189","aliases":["EUVD-2023-2886","GHSA-55g2-vm3q-7w52","PYSEC-2026-1401","RHSA-2023:7773","RHSA-2024:1536","RHSA-2024:2010","UBUNTU-CVE-2023-5189"],"status":"published","title":"Hub: insecure galaxy-importer tarfile extraction","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00982,"percentile":0.62539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-23"],"published":"2023-11-14T22:57:00Z","modified":"2026-10-17T12:57:21Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.4.16"}]}]},{"source":"osv","ecosystem":"PyPI","package":"galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.4.16"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.2.dev0","0.1.3","0.1.3b1","0.1.3b10","0.1.3b11","0.1.3b2","0.1.3b3","0.1.3b4","0.1.3b5","0.1.3b6","0.1.3b7","0.1.3b8","0.1.4","0.1.5","0.1.6","0.1.7","0.1.7a1","0.1.8","0.2.0","0.2.1","0.2.11","0.2.12","0.2.13","0.2.14","0.2.15","0.2.16","0.2.1a1","0.2.2","0.2.2a1","0.2.2a2","0.2.2a3","0.2.2a4","0.2.3","0.2.4","0.2.5","0.2.5a1","0.2.5a2","0.2.6","0.2.7","0.2.8","0.2.8rc1","0.2.8rc10","0.2.8rc11","0.2.8rc12","0.2.8rc3","0.2.8rc4","0.2.8rc5","0.2.8rc9","0.2.9","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.0.post1","0.4.1","0.4.10","0.4.11","0.4.12","0.4.13","0.4.14","0.4.15","0.4.16","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.4.9"]},{"source":"osv","ecosystem":"PyPI","package":"galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.4.16"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.2.dev0","0.1.3","0.1.3b1","0.1.3b10","0.1.3b11","0.1.3b2","0.1.3b3","0.1.3b4","0.1.3b5","0.1.3b6","0.1.3b7","0.1.3b8","0.1.4","0.1.5","0.1.6","0.1.7","0.1.7a1","0.1.8","0.2.0","0.2.1","0.2.11","0.2.12","0.2.13","0.2.14","0.2.15","0.2.16","0.2.1a1","0.2.2","0.2.2a1","0.2.2a2","0.2.2a3","0.2.2a4","0.2.3","0.2.4","0.2.5","0.2.5a1","0.2.5a2","0.2.6","0.2.7","0.2.8","0.2.8rc1","0.2.8rc10","0.2.8rc11","0.2.8rc12","0.2.8rc3","0.2.8rc4","0.2.8rc5","0.2.8rc9","0.2.9","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.4.0","0.4.0.post1","0.4.1","0.4.10","0.4.11","0.4.12","0.4.13","0.4.14","0.4.15","0.4.16","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.4.9"]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-1.el8ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-1.el8ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-1.el9ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-1.el9ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el8","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el8ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el8","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el8ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el8ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el9ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el9ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.8-1.el9ap"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1+dfsg-1","1.3.4+dfsg-1","1.4.0+dfsg-1","1.4.1+dfsg-1","1.4.3+dfsg-1","1.4.4+dfsg-1","1.5.4+dfsg-1","1.5.4+dfsg-1ubuntu0.1~esm1","1.5.4+dfsg-1ubuntu0.1~esm2","1.5.4+dfsg-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.2+dfsg-2","1.9.4-1","2.0.0.2-2","2.0.0.2-2ubuntu1","2.0.0.2-2ubuntu1.1","2.0.0.2-2ubuntu1.2","2.0.0.2-2ubuntu1.3","2.0.0.2-2ubuntu1.3+esm1","2.0.0.2-2ubuntu1.3+esm2","2.0.0.2-2ubuntu1.3+esm3","2.0.0.2-2ubuntu1.3+esm4","2.0.0.2-2ubuntu1.3+esm5","2.0.0.2-2ubuntu1.3+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1.0+dfsg-2","2.5.0+dfsg-1","2.5.1+dfsg-1","2.5.1+dfsg-1ubuntu0.1","2.5.1+dfsg-1ubuntu0.1+esm1","2.5.1+dfsg-1ubuntu0.1+esm2","2.5.1+dfsg-1ubuntu0.1+esm3","2.5.1+dfsg-1ubuntu0.1+esm4","2.5.1+dfsg-1ubuntu0.1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.3+dfsg-1","2.8.6+dfsg-1","2.9.2+dfsg-1","2.9.4+dfsg-1","2.9.6+dfsg-1","2.9.6+dfsg-1ubuntu0.1~esm1","2.9.6+dfsg-1ubuntu0.1~esm2","2.9.6+dfsg-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.0-1","2.12.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.7+merged+base+2.10.8+dfsg-1","2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1","2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.7.0+dfsg-1","7.7.0+dfsg-3","9.2.0+dfsg-0ubuntu4","9.2.0+dfsg-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.9-2","2.14.11-1","2.14.11-2","2.14.13-1","2.16.3-0ubuntu1","2.16.3-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.2.0+dfsg-1","12.0.0~a2+dfsg-1","12.0.0~a4+dfsg-1","12.0.0~a6+dfsg-1","12.0.0~b1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.1-4ubuntu1","2.19.0~beta4-1ubuntu1","2.19.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13.1.0+dfsg-1ubuntu1","13.4.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20.1-1","2.21.1~rc1-1","2.21.1~rc1-2","2.21.1~rc1-2ubuntu1","2.22.0~beta2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.0.0~b1+dfsg-1","12.0.0+dfsg-1","12.2.0+dfsg-1","13.1.0+dfsg-1","13.1.0+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.19.0-1ubuntu1","2.19.4-1","2.20.1-1"]}],"products":[{"vendor":"red hat","product":"red hat ansible automation platform 2.4 for rhel 8"},{"vendor":"red hat","product":"red hat ansible automation platform 2.4 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.14 for rhel 8"},{"vendor":"red hat","product":"red hat satellite 6.15 for rhel 8"},{"vendor":"redhat","product":"ansible_automation_platform"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:7773","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1536","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2010","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5189","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234387","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Exploit","Issue Tracking","Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5189","tags":["advisory"]},{"url":"https://github.com/ansible/galaxy-importer/blob/2c5c7c05fdfb0835878234b36de32902c703616d/galaxy_importer/collection.py#L160-L165","tags":["web"]},{"url":"https://github.com/advisories/GHSA-55g2-vm3q-7w52","tags":["advisory"]},{"url":"https://github.com/ansible/galaxy-importer","tags":["package"]},{"url":"https://pypi.org/project/galaxy-importer","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247629","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7773.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5189","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5764","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5764","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_and_updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1536.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43665","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/oct/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-47627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47627","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49081","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-q3qx-c6g2-7pw2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.3","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23334","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23334","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23829","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270295","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249970","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2010.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4320","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4320","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37276","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37276","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38037","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2023-38037.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41164","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41164","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/sep/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49082","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-qvrw-v9rv-5rjx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52323","tags":["advisory"]},{"url":"https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst","tags":["article"]},{"url":"https://pypi.org/project/pycryptodomex/#history","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21647","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22047","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5189","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-5189","title":"Hub: insecure galaxy-importer tarfile extraction","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-14T22:57:00.584Z","modified":"2025-11-20T17:30:17.896Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-2886","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-14T22:57:00Z","modified":"2025-11-20T17:30:17Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:14.564249Z"}],"ghsa":[{"id":"GHSA-55g2-vm3q-7w52","title":"Ansible galaxy-importer Path Traversal vulnerability","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-15T00:31:08Z","modified":"2024-12-06T18:06:34Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T14:38:24.542211Z"}],"nvd":[{"id":"CVE-2023-5189","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-14T23:15:12.29Z","modified":"2026-06-17T06:47:45.507Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-23","CWE-22"],"updated_at":"2026-11-02T14:08:46.647045Z"}],"osv":[{"id":"GHSA-55g2-vm3q-7w52","title":"Ansible galaxy-importer Path Traversal vulnerability","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-15T00:31:08Z","modified":"2026-07-07T17:56:36.437671013Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"PYSEC-2026-1401","title":"Ansible galaxy-importer Path Traversal vulnerability","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2026-07-07T11:45:26.817403Z","modified":"2026-07-07T17:46:43.184056072Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"RHSA-2023:7773","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update","status":"published","published":"2024-09-16T16:14:18Z","modified":"2026-06-26T11:10:01Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1536","title":"Red Hat Security Advisory: Satellite 6.14.3 Async Security Update","status":"published","published":"2024-09-18T05:49:45Z","modified":"2026-09-09T10:03:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:2010","title":"Red Hat Security Advisory: Satellite 6.15.0 release","status":"published","published":"2024-09-30T15:58:05Z","modified":"2026-10-13T10:06:37Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-5189","description":"A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.","status":"published","published":"2023-11-14T23:15:00Z","modified":"2026-10-17T12:57:21.942981368Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"}]}}