https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:21:54.459967+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06098 bdu:2023-06098 2026-10-04T02:21:54.665857+00:00 bdu:2023-06098 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T02:21:54.665902+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/euvd-2026-261482 EUVD-2026-261482 2026-10-04T02:21:54.665922+00:00 EUVD-2026-261482 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5189 fkie_cve-2023-5189 2026-10-04T02:21:54.665934+00:00

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

 https://cve.radiocsirt.org/vuln/ghsa-55g2-vm3q-7w52 GHSA-55g2-vm3q-7w52 — Ansible galaxy-importer Path Traversal vulnerability 2026-10-04T02:21:54.665964+00:00

Affected: PyPI: galaxy-importer

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

 https://cve.radiocsirt.org/vuln/gsd-2023-5189 gsd-2023-5189 2026-10-04T02:21:54.665988+00:00 gsd-2023-5189 https://cve.radiocsirt.org/vuln/pysec-2026-1401 PYSEC-2026-1401 — Ansible galaxy-importer Path Traversal vulnerability 2026-10-04T02:21:54.665999+00:00

Affected: PyPI: galaxy-importer

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

 https://cve.radiocsirt.org/vuln/rhsa-2023:7773 RHSA-2023:7773 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update 2026-10-04T02:21:54.666019+00:00

Hub: insecure galaxy-importer tarfile extraction ansible: Template Injection

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5189 UBUNTU-CVE-2023-5189 2026-10-04T02:21:54.666037+00:00

Affected: Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:25.10: ansible, Ubuntu:25.10: ansible-core and 2 more

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2449 WID-SEC-W-2023-2449 — Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-04T02:21:54.666072+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Ansible ausnutzen, um Dateien zu manipulieren.