https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:36:35.712348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02914 bdu:2020-02914 2026-10-04T03:36:36.050277+00:00 bdu:2020-02914 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2017-7481 BREW-ansible-CVE-2017-7481 2026-10-04T03:36:36.050317+00:00

Affected: Homebrew: ansible

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

 https://cve.radiocsirt.org/vuln/cnvd-2017-10573 cnvd-2017-10573 2026-10-04T03:36:36.050353+00:00 cnvd-2017-10573 https://cve.radiocsirt.org/vuln/euvd-2026-74714 EUVD-2026-74714 2026-10-04T03:36:36.050368+00:00 EUVD-2026-74714 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7481 fkie_cve-2017-7481 2026-10-04T03:36:36.050380+00:00

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

 https://cve.radiocsirt.org/vuln/ghsa-w578-j992-554x GHSA-w578-j992-554x — Ansible fails to properly mark lookup-plugin results as unsafe 2026-10-04T03:36:36.050403+00:00

Affected: PyPI: ansible

Ansible before versions 2.1.6.0, 2.2.3.0, 2.3.1.0, and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

 https://cve.radiocsirt.org/vuln/gsd-2017-7481 gsd-2017-7481 2026-10-04T03:36:36.050430+00:00 gsd-2017-7481 https://cve.radiocsirt.org/vuln/opensuse-su-2017:2976-1 openSUSE-SU-2017:2976-1 — Security update for ansible 2026-10-04T03:36:36.050441+00:00

Security update for ansible

 https://cve.radiocsirt.org/vuln/pysec-2018-41 PYSEC-2018-41 2026-10-04T03:36:36.050462+00:00

Affected: PyPI: ansible

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

 https://cve.radiocsirt.org/vuln/rhsa-2017:1244 RHSA-2017:1244 — Red Hat Security Advisory: ansible and openshift-ansible security and bug fix update 2026-10-04T03:36:36.050483+00:00

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587) ansible: Security issue with lookup return not tainting the jinja2 environment

 https://cve.radiocsirt.org/vuln/suse-su-2017:3029-1 SUSE-SU-2017:3029-1 — Security update for ansible and monasca-installer 2026-10-04T03:36:36.050502+00:00

Security update for ansible and monasca-installer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7481 UBUNTU-CVE-2017-7481 2026-10-04T03:36:36.050518+00:00

Affected: Ubuntu:16.04:LTS: ansible

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1808 WID-SEC-W-2026-1808 — Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den… 2026-10-04T03:36:36.050537+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.