Ansible vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
20 matching records
- Medium6.2Important: ansible-collection-redhat-leapp security updateOpen the advisoryOct 30, 2026
- High8.5A flaw was found in Ansible Operator Plugins.Check if you run itEPSS 0.47%Oct 15, 2026
- Medium6.5A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.Check if you run itEPSS 0.23%Oct 7, 2026
- Medium6.8An authorization bypass was found in the Ansible Automation Platform (AAP) gateway.Check if you run itEPSS 0.54%Sep 24, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.80%Sep 23, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.29%Sep 23, 2026
- Medium5.5Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissionsCheck if you run itEPSS 0.11%Jul 30, 2026
- Medium6.2Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tamperingCheck if you run itEPSS 0.25%Jul 30, 2026
- High7.3A local privilege escalation vulnerability was found in the ansible.posix authorized_key module.Check if you run itEPSS 0.16%Jun 10, 2026
- High7.8A flaw was found in ansible-core.Check if you run itEPSS 0.22%Jun 5, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 70.29%May 26, 2026
- Medium6.4A container privilege escalation flaw was found in certain Ansible Automation Platform images.Check if you run itEPSS 0.18%Apr 8, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component.Check if you run itEPSS 0.18%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.Check if you run itEPSS 0.22%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.Check if you run itEPSS 0.18%Feb 27, 2026
- High8.5A flaw was found in Ansible Automation Platform (AAP).Check if you run itEPSS 0.42%Jan 8, 2026
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- UnknownRed Hat ansible Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.33%May 10, 2024
- High7.5python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method.Check if you run itEPSS 4.74%Jun 19, 2018
- Medium4.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing prCheck if you run itEPSS 0.87%Jun 13, 2018
Sort
20 records