Lucene search
+L

36 matches found

osv_azl
osv_azl
•added 2026/10/08 10:17 p.m.•36 views

AZL-107132 CVE-2026-89091 affecting package ansible 2.17.11-1

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

8.8CVSS5.9AI score0.0048EPSS
SaveExploits0References1
Rows per page
Query Builder