ansible-core-2.20 vulnerabilities (openSUSE)
11 vulnerabilities.
ansible-core-2.20openSUSEAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce6.7 Mediumansible-core-2.20openSUSEansible-core-2.21.6-1.1 on GA mediaNo scoreansible-core-2.20openSUSEAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution8.8 Highansible-core-2.20openSUSEAnsible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)7.8 Highansible-core-2.20openSUSEAnsible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution7.8 Highansible-core-2.20openSUSEAnsible-core: unsafe tagging bypass via hostvars object in ansible-core5.5 Mediumansible-core-2.20openSUSEAnsible-core: ansible-core user may read/write unauthorized content6.3 Mediumansible-core-2.20openSUSEAnsible-core: exposure of sensitive information in ansible vault files due to improper logging5.5 Mediumansible-core-2.20openSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumansible-core-2.20openSUSEAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files6.3 Mediumansible-core-2.20openSUSEAnsible: template injection7.1 High