57 matches found
galaxy-importer (0.1.3b11) potentially affected by CVE-2025-14010 via ansible (2.9.0rc5)
ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...
galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2025-14010 via ansible (2.9.0b1)
ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...
galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2023-5115 via ansible (2.9.0b1)
ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...
galaxy-importer (0.1.3b11) potentially affected by CVE-2023-5115 via ansible (2.9.0rc5)
ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...
Ansible galaxy-importer Path Traversal vulnerability
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
galaxy-ng (>=4.2.0a3, <=4.6.6), pulp-ansible (>=0.2.0b10, <=0.6.2) potentially affected by CVE-2023-5189 via galaxy-importer (>=0.1.1, <=0.4.9)
galaxy-importer PYPI version =0.1.1, =4.2.0a3, =0.2.0b10, =0.6.2 Source cves: CVE-2023-5189 Source advisory: OSV:PYSEC-2026-1401...
PYSEC-2026-1401 Ansible galaxy-importer Path Traversal vulnerability
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
galaxy-importer (0.1.3b11) potentially affected by CVE-2025-14010 via ansible (2.9.0rc5)
ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...
galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2025-14010 via ansible (2.9.0b1)
ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...
Linux Distros Unpatched Vulnerability : CVE-2023-5189
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of...
Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2023-5115 via ansible (2.9.0b1)
ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...
galaxy-importer (0.1.3b11) potentially affected by CVE-2023-5115 via ansible (2.9.0rc5)
ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...
Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
Ansible galaxy-importer Path Traversal vulnerability
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
GHSA-55G2-VM3Q-7W52 Ansible galaxy-importer Path Traversal vulnerability
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
galaxy-ng (>=4.2.0a3, <=4.6.6), pulp-ansible (>=0.2.0b10, <=0.6.2) potentially affected by CVE-2023-5189 via galaxy-importer (>=0.1.1, <=0.4.9)
galaxy-importer PYPI version =0.1.1, =4.2.0a3, =0.2.0b10, =0.6.2 Source cves: CVE-2023-5189 Source advisory: OSV:GHSA-55G2-VM3Q-7W52...
galaxy-ng (>=4.2.0a3, <=4.6.6), pulp-ansible (>=0.2.0b10, <=0.6.2) potentially affected by CVE-2023-5189 via galaxy-importer (>=0.1.1, <=0.4.9)
galaxy-importer PYPI version =0.1.1, =4.2.0a3, =0.2.0b10, =0.6.2 Source cves: CVE-2023-5189 Source advisory: GHSA-55G2-VM3Q-7W52...
CVE-2023-5189
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...