https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:16:36.451899+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16071 bdu:2025-16071 2026-10-04T07:16:36.480043+00:00 bdu:2025-16071 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-14858 BREW-ansible-CVE-2019-14858 2026-10-04T07:16:36.480094+00:00

Affected: Homebrew: ansible

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.

 https://cve.radiocsirt.org/vuln/cnvd-2019-36950 cnvd-2019-36950 2026-10-04T07:16:36.480132+00:00 cnvd-2019-36950 https://cve.radiocsirt.org/vuln/euvd-2026-56626 EUVD-2026-56626 2026-10-04T07:16:36.480147+00:00 EUVD-2026-56626 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14858 fkie_cve-2019-14858 2026-10-04T07:16:36.480158+00:00

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.

 https://cve.radiocsirt.org/vuln/ghsa-h653-95qw-h2mp GHSA-h653-95qw-h2mp — Ansible leaks sensitive information to logs when told not to 2026-10-04T07:16:36.480192+00:00

Affected: PyPI: ansible

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as `no_log`, passing an invalid parameter name to the module will cause the task to fail before the `no_log` options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.

 https://cve.radiocsirt.org/vuln/gsd-2019-14858 gsd-2019-14858 2026-10-04T07:16:36.480219+00:00 gsd-2019-14858 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0513-1 openSUSE-SU-2020:0513-1 — Security update for ansible 2026-10-04T07:16:36.480231+00:00

Security update for ansible

 https://cve.radiocsirt.org/vuln/pysec-2019-171 PYSEC-2019-171 2026-10-04T07:16:36.480255+00:00

Affected: PyPI: ansible

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.

 https://cve.radiocsirt.org/vuln/rhsa-2019:3201 RHSA-2019:3201 — Red Hat Security Advisory: Ansible security update 2026-10-04T07:16:36.480277+00:00

ansible: secrets disclosed on logs when no_log enabled ansible: Incomplete fix for CVE-2019-10206 ansible: sub parameters marked as no_log are not masked in certain failure scenarios

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14858 UBUNTU-CVE-2019-14858 2026-10-04T07:16:36.480297+00:00

Affected: Ubuntu:Pro:18.04:LTS: ansible

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3593 WID-SEC-W-2024-3593 — Ansible: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T07:16:36.480316+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um Informationen offenzulegen.