CVE-2026-84503

A vulnerability exists in ansible-core 's ansible.builtin.git module, where the module invokes git (ls-remote, clone, fetch) using the repository URL as a positional argument without a -- separator. This allows a repository URL starting with a dash to be interpreted as a command-line option. An a...

EUVD-2026-120161

A flaw was found in ansible-core's ansible.builtin.git module. The module invokes git ls-remote, clone, fetch with the repository URL as a positional argument and without a "--" separator, so a repository URL that begins with a dash is interpreted by git as a command-line option. A caller that...