ansible-core vulnerabilities (openSUSE)
11 vulnerabilities.
-
ansible-coreopenSUSE Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce 6.7 Medium -
ansible-coreopenSUSE ansible-core-2.21.6-1.1 on GA media No score -
ansible-coreopenSUSE Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 High -
ansible-coreopenSUSE Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
ansible-coreopenSUSE Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
ansible-coreopenSUSE Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Medium -
ansible-coreopenSUSE Ansible-core: ansible-core user may read/write unauthorized content 6.3 Medium -
ansible-coreopenSUSE Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansible-coreopenSUSE Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansible-coreopenSUSE Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files 6.3 Medium -
ansible-coreopenSUSE Ansible: template injection 7.1 High