[CVE-2026-89091 ] Published: Sep 25, 2026, 12:00:00 AM UTC
A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive extractor validates member
paths using lexical path normalisation (os.path.abspath)
High(8.8) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.21.5-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.21.5-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.21.5-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.21.5-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
[CVE-2026-16493 ] Published: Jul 21, 2026, 4:32:48 PM UTC
A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator bef
High(7.8) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.21.4-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.21.4-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.21.4-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.21.4-2.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
[CVE-2026-11332 ] Published: Jun 5, 2026, 7:12:55 AM UTC
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delim
High(7.8) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.18.3-160000.3.1, 2.18.3-160000.4.1, 2.21.0-3.1
Version impact unknown
pypi · ansible-core · opensuse · leap 16.0; pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.18.3-160000.3.1, 2.18.3-160000.4.1, 2.21.0-3.1
Version impact unknown
pypi · ansible-core · opensuse · leap 16.0; pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.18.3-160000.3.1, 2.18.3-160000.4.1, 2.21.0-3.1
Version impact unknown
pypi · ansible-core · opensuse · leap 16.0; pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.18.3-160000.3.1, 2.18.3-160000.4.1, 2.21.0-3.1
Version impact unknown
pypi · ansible-core · opensuse · leap 16.0; pypi · ansible-core · opensuse · tumbleweed
[CVE-2024-11079 ] Published: Nov 11, 2024, 12:00:00 AM UTC
ansible: CVE-2024-11079
Medium(5.5) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.18.1-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.18.1-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.18.1-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.18.1-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
[CVE-2024-8775 ] Published: Sep 13, 2024, 8:35:00 AM UTC
ansible: CVE-2024-8775
Medium(5.5) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.17.6-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.17.6-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.17.6-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.17.6-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
[CVE-2023-5115 ] Published: Sep 21, 2023, 7:33:00 PM UTC
ansible: CVE-2023-5115
Medium(6.3) Unknown Details (4) 2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.16.9-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.16.9-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.2.2 · noarch · leap-16.0
Unknown · Fixed: 2.16.9-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
2.18.3-160000.3.1 · noarch · leap-16.0
Unknown · Fixed: 2.16.9-1.1
Version impact unknown
pypi · ansible-core · opensuse · tumbleweed
