Photon OS 5.0: Ansible PHSA-2026-5.0-91-0855

An update of the ansible package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ants-client (>=2.0.0rc1, <=2.0.0) potentially affected by CVE-2025-14010 via ansible (2.9.3)

ansible PYPI version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =2.0.0rc1, =2.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

mucsi96-publish-tools (>=40.0.0, <=41.0.0) potentially affected by CVE-2025-14010 via ansible (9.11.0)

ansible PYPI version 9.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - mucsi96-publish-tools =40.0.0, =41.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

tempor (>=0.9.0, <=0.10.3) potentially affected by CVE-2025-14010 via ansible (11.5.0)

ansible PYPI version 11.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tempor =0.9.0, =0.10.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

firewheel (>=2.9.0, <=3.1.0), firewheel-repo-android (1.0.0) +11 more potentially affected by CVE-2025-14010 via ansible (12.0.0)

ansible PYPI version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - firewheel =2.9.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =1.0.1, =2.7.0, =2.7.0, =2.7.1 Source cves: CVE-2025-14010 Source advisory:...

ants-client (>=3.0.0, <=3.0.5) potentially affected by CVE-2025-14010 via ansible (2.10.1)

ansible PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =3.0.0, =3.0.5 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansible-inventory-to-ssh-config (>=0.0.2, <=1.0.0) potentially affected by CVE-2025-14010 via ansible (2.10.5)

ansible PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-inventory-to-ssh-config =0.0.2, =1.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

kayobe (>=5.0.0.0rc1, <=5.1.0) potentially affected by CVE-2025-14010 via ansible (2.6.20)

ansible PYPI version 2.6.20 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - kayobe =5.0.0.0rc1, =5.1.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

bbot (>=1.1.7, <=2.3.2.5927rc0), desmo-api (>=0.1.0, <=0.5.0) +9 more potentially affected by CVE-2025-14010 via ansible (8.7.0)

ansible PYPI version 8.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - bbot =1.1.7, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =2.3.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-11...

ome-ansible-molecule (0.4.4) potentially affected by CVE-2025-14010 via ansible (2.6.18)

ansible PYPI version 2.6.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule 0.4.4 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

galaxy-importer (0.1.3b11) potentially affected by CVE-2025-14010 via ansible (2.9.0rc5)

ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ops-cli (>=1.12.1, <=2.0.4), unfurl (>=0.0.1.dev144, <=0.0.1.dev220) potentially affected by CVE-2025-14010 via ansible (2.7.13)

ansible PYPI version 2.7.13 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =1.12.1, =0.0.1.dev144, =0.0.1.dev220 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (0.0.12) potentially affected by CVE-2025-14010 via ansible (2.7.15)

ansible PYPI version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder 0.0.12 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

mucsi96-publish-tools (36.0.0) potentially affected by CVE-2025-14010 via ansible (9.9.0)

ansible PYPI version 9.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - mucsi96-publish-tools 36.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

sagecreator (>=0.0.31, <=0.1.1.3) potentially affected by CVE-2025-14010 via ansible (2.7.2)

ansible PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - sagecreator =0.0.31, =0.1.1.3 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

zbuilder (>=0.0.18, <=0.0.21) potentially affected by CVE-2025-14010 via ansible (2.9.7)

ansible PYPI version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder =0.0.18, =0.0.21 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansitom (>=0.0.1, <=0.0.2), cloudmesh-client (>=4.5.0, <=4.7.3) +2 more potentially affected by CVE-2025-14010 via ansible (2.2.1.0)

ansible PYPI version 2.2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansitom =0.0.1, =4.5.0, =0.0.21a8, =0.0.21a21, =0.0.22a2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

tempor (>=0.5.8, <=0.5.16) potentially affected by CVE-2025-14010 via ansible (5.7.0)

ansible PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tempor =0.5.8, =0.5.16 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

kayobe (2.0.0) potentially affected by CVE-2025-14010 via ansible (2.2.3.0)

ansible PYPI version 2.2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - kayobe 2.0.0 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

asset-inventory (0.0.7) potentially affected by CVE-2025-14010 via ansible (2.8.6)

ansible PYPI version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - asset-inventory 0.0.7 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...