https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:40:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00285 bdu:2023-00285 https://cve.radiocsirt.org/vuln/bdu:2023-00285 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2021-3583 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2021-3583 https://cve.radiocsirt.org/vuln/euvd-2026-20924 EUVD-2026-20924 https://cve.radiocsirt.org/vuln/euvd-2026-20924 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3583 <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3583 https://cve.radiocsirt.org/vuln/ghsa-2pfh-q76x-gwvm <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-2pfh-q76x-gwvm https://cve.radiocsirt.org/vuln/gsd-2021-3583 gsd-2021-3583 https://cve.radiocsirt.org/vuln/gsd-2021-3583 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3583 msrc_CVE-2021-3583 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3583 https://cve.radiocsirt.org/vuln/oesa-2025-1647 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ansible</p> <p>\ Security Fix(es):</p> <p>A flaw was found in Ansible, where a user&amp;apos;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.(CVE-2021-3583)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ansible</p> <p>\ Security Fix(es):</p> <p>A flaw was found in Ansible, where a user&amp;apos;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.(CVE-2021-3583)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1647 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10615-1 <p>ansible-2.9.24-1.2 on GA media</p> <p>ansible-2.9.24-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10615-1 https://cve.radiocsirt.org/vuln/pysec-2021-358 <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/pysec-2021-358 https://cve.radiocsirt.org/vuln/rhba-2021:2703 <p>ansible: Template Injection through yaml multi-line strings with ansible facts used in template.</p> <p>ansible: Template Injection through yaml multi-line strings with ansible facts used in template.</p> https://cve.radiocsirt.org/vuln/rhba-2021:2703 https://cve.radiocsirt.org/vuln/suse-su-2021:4152-1 <p>Security update for ansible</p> <p>Security update for ansible</p> https://cve.radiocsirt.org/vuln/suse-su-2021:4152-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3583 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:25.10: ansible, Ubuntu:26.04:LTS: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:25.10: ansible, Ubuntu:26.04:LTS: ansible</p> <p>A flaw was found in Ansible, where a user&#39;s controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3583 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1355 <p>Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und Daten offenzulegen</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und Daten offenzulegen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1355