https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:33:07 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-16493 <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-16493 https://vulnerability.circl.lu/vuln/ghsa-m37p-hmh2-w6j2 <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> https://vulnerability.circl.lu/vuln/ghsa-m37p-hmh2-w6j2 https://vulnerability.circl.lu/vuln/msrc_cve-2026-16493 msrc_CVE-2026-16493 https://vulnerability.circl.lu/vuln/msrc_cve-2026-16493 https://vulnerability.circl.lu/vuln/opensuse-su-2026:21828-1 <p>Security update for ansible-core</p> <p>Security update for ansible-core</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:21828-1 https://vulnerability.circl.lu/vuln/rhsa-2026:63385 <p>jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks GitPython: GitPython: Arbitrary code execution via improper validation of clone options GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding gitpython: GitPython: Information disclosure via environment variable expansion in URL handling gitpython: GitPython: Remote Code Execution via malicious Git template gitpython: GitPython: Arbitrary File Overwrite via improper git option validation gitpython: GitPython: Remote Code Exec…</p> <p>jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks GitPython: GitPython: Arbitrary code execution via improper validation of clone options GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding gitpython: GitPython: Information disclosure via environment variable expansion in URL handling gitpython: GitPython: Remote Code Execution via malicious Git template gitpython: GitPython: Arbitrary File Overwrite via improper git option validation gitpython: GitPython: Remote Code Exec…</p> https://vulnerability.circl.lu/vuln/rhsa-2026:63385 https://vulnerability.circl.lu/vuln/suse-su-2026:23704-1 <p>Security update for ansible-core</p> <p>Security update for ansible-core</p> https://vulnerability.circl.lu/vuln/suse-su-2026:23704-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-16493 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:26.04:LTS: ansible, Ubuntu:26.04:LTS: ansible-core</p> <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:26.04:LTS: ansible, Ubuntu:26.04:LTS: ansible-core</p> <p>A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core&#39;s concrete_artifact_manager.py constructs git clone commands without a &#39;--&#39; (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs &#39;ansible-galaxy collection install&#39; with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-16493