30 matches found
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
EUVD-2026-102157
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982
A Jinja2 template injection vulnerability exists in Ansible Operator Plugins . A low-privileged Kubernetes user can exploit this by crafting malicious custom resource (CR) specification values that lack proper sanitization. When processed by Ansible, these values allow embedded Jinja2 expressions...
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
PT-2026-115003
🚨 CVE-2026-92982 A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded...
CVE-2026-97689 vulnerabilities
Vulnerabilities for packages: open-webui, superset-fips, py3-cassandra-medusa, nemo, spamcheck, commercial-gitlab-cng-ee-fips, datadog-agent, openstack-designate-2026.1, ansible-operator, wazuh-manager-fips, openstack-kolla-toolbox-2025.2-fips, nemo-rl-cuda-13.0, py3-hashin, ansible-operator-fips...
GHSA-GH4C-6FX4-QH6G vulnerabilities
Vulnerabilities for packages: open-webui, superset-fips, py3-cassandra-medusa, nemo, spamcheck, commercial-gitlab-cng-ee-fips, datadog-agent, openstack-designate-2026.1, ansible-operator, wazuh-manager-fips, openstack-kolla-toolbox-2025.2-fips, nemo-rl-cuda-13.0, py3-hashin, ansible-operator-fips...
GHSA-VXQ7-64XX-V4GW vulnerabilities
Vulnerabilities for packages: open-webui, superset-fips, py3-cassandra-medusa, nemo, spamcheck, commercial-gitlab-cng-ee-fips, datadog-agent, openstack-designate-2026.1, ansible-operator, wazuh-manager-fips, openstack-kolla-toolbox-2025.2-fips, nemo-rl-cuda-13.0, py3-hashin, ansible-operator-fips...
GHSA-8988-9CW3-XX77 vulnerabilities
Vulnerabilities for packages: open-webui, superset-fips, py3-cassandra-medusa, nemo, spamcheck, commercial-gitlab-cng-ee-fips, datadog-agent, openstack-designate-2026.1, ansible-operator, wazuh-manager-fips, openstack-kolla-toolbox-2025.2-fips, nemo-rl-cuda-13.0, py3-hashin, ansible-operator-fips...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: open-webui, k8s-sidecar, prefect, py3-cassandra-medusa, mlflow, duplicity, datadog-agent, superset, dbt-snowflake, authentik, lmcache-cuda-12.8, metaflow-service, dagster, gitlab-cng, openstack-kolla-toolbox-2025.2, openstack-nova-2026.1, mcp-atlassian,...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: open-webui, k8s-sidecar, prefect, py3-cassandra-medusa, mlflow, duplicity, datadog-agent, superset, dbt-snowflake, authentik, lmcache-cuda-12.8, metaflow-service, dagster, gitlab-cng, openstack-kolla-toolbox-2025.2, openstack-nova-2026.1, mcp-atlassian,...
CVE-2024-9902 vulnerabilities
Vulnerabilities for packages: ansible-operator...
GHSA-32P4-GM2C-WMCH vulnerabilities
Vulnerabilities for packages: ansible-operator...
GHSA-Q2X7-8RV6-6Q7H vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, localstack, kserve, py3-jinja2, mlflow, airflow, apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server, checkov, nemo, reflex, superset, dask-gateway, kubeflow-jupyter-web-app, emissary, ansible-operator...
GHSA-GMJ6-6F8F-6699 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, localstack, kserve, py3-jinja2, mlflow, airflow, apache-beam-python-3.11-sdk, nemo, checkov, reflex, superset, dask-gateway, kubeflow-jupyter-web-app, emissary, ansible-operator...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, localstack, kserve, py3-jinja2, mlflow, airflow, apache-beam-python-3.11-sdk, nemo, checkov, reflex, superset, dask-gateway, kubeflow-jupyter-web-app, emissary, ansible-operator...