30 matches found
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982
A Jinja2 template injection vulnerability exists in Ansible Operator Plugins . A low-privileged Kubernetes user can exploit this by crafting malicious custom resource (CR) specification values that lack proper sanitization. When processed by Ansible, these values allow embedded Jinja2 expressions...
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
EUVD-2026-102157
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
PT-2026-115003
🚨 CVE-2026-92982 A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded...
GHSA-GH4C-6FX4-QH6G vulnerabilities
Vulnerabilities for packages: graalvm, aws-cli, openstack-placement-2025.2, airflow, kserve, litellm, openstack-glance-2025.2, request-1276, spamcheck, ansible-operator, nemo-rl-cuda-13.0, awx, apache-beam-python-3.12-sdk, openstack-barbican-2026.1, openstack-keystone-2025.2-fips,...
GHSA-VXQ7-64XX-V4GW vulnerabilities
Vulnerabilities for packages: graalvm, aws-cli, openstack-placement-2025.2, airflow, kserve, litellm, openstack-glance-2025.2, request-1276, spamcheck, ansible-operator, nemo-rl-cuda-13.0, awx, apache-beam-python-3.12-sdk, openstack-barbican-2026.1, openstack-keystone-2025.2-fips,...
CVE-2026-97689 vulnerabilities
Vulnerabilities for packages: graalvm, aws-cli, openstack-placement-2025.2, airflow, kserve, litellm, openstack-glance-2025.2, request-1276, spamcheck, ansible-operator, nemo-rl-cuda-13.0, awx, apache-beam-python-3.12-sdk, openstack-barbican-2026.1, openstack-keystone-2025.2-fips,...
GHSA-8988-9CW3-XX77 vulnerabilities
Vulnerabilities for packages: graalvm, aws-cli, openstack-placement-2025.2, airflow, kserve, litellm, openstack-glance-2025.2, request-1276, spamcheck, ansible-operator, nemo-rl-cuda-13.0, awx, apache-beam-python-3.12-sdk, openstack-barbican-2026.1, openstack-keystone-2025.2-fips,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: dask-kubernetes-fips, openstack-keystone-2026.1, ggshield, openstack-keystone-2025.1, openstack-nova-2026.1, openstack-placement-2025.2, kubeflow-volumes-web-app, airflow, kserve, litellm, in-toto, openstack-glance-2025.2, prefect, barman, request-1276, synapse,...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: dask-kubernetes-fips, openstack-keystone-2026.1, ggshield, openstack-keystone-2025.1, openstack-nova-2026.1, openstack-placement-2025.2, kubeflow-volumes-web-app, airflow, kserve, litellm, in-toto, openstack-glance-2025.2, prefect, barman, request-1276, synapse,...
GHSA-32P4-GM2C-WMCH vulnerabilities
Vulnerabilities for packages: ansible-operator...
CVE-2024-9902 vulnerabilities
Vulnerabilities for packages: ansible-operator...
GHSA-Q2X7-8RV6-6Q7H vulnerabilities
Vulnerabilities for packages: checkov, ansible-operator, apache-beam-python-3.11-sdk, localstack, emissary, py3-jinja2, mlflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, airflow, kserve, reflex, nemo, superset, dask-gateway, kubeflow-pipelines-visualization-server...
GHSA-GMJ6-6F8F-6699 vulnerabilities
Vulnerabilities for packages: checkov, ansible-operator, apache-beam-python-3.11-sdk, localstack, emissary, py3-jinja2, mlflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, airflow, kserve, reflex, nemo, superset, dask-gateway...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: checkov, ansible-operator, apache-beam-python-3.11-sdk, localstack, emissary, py3-jinja2, mlflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, airflow, kserve, reflex, nemo, superset, dask-gateway...