Known vulnerabilities in ansible-runner
Vendor:
Ansible
Software:
ansible-runner
Software CPE:
cpe:2.3:a:ansible:ansible-runner:*:*:*:*:*:*:*:*
Website:
https://github.com/ansible/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60371 - Permissions, Privileges, and Access Controls CVE-2021-4112 |
CWE-264 | Medium | - | 08.02.2022 |
SB2022020816 SB2022020817 SB2022020904 and 2 more |
||
| #VU59579 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-4041 |
CWE-78 | Low | 2.1.0 | 13.01.2022 |
SB2022011307 SB2022011737 SB2022120106 and 3 more |