<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-09-29T03:12:43.445531+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2016-8628</id>
    <title>CVE-2016-8628</title>
    <updated>2026-09-29T03:12:43.791441+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Red Hat Ansible</p>
<p>Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2016-8628"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ghsa-jg4f-jqm5-4mgq</id>
    <title>GHSA-jg4f-jqm5-4mgq — Ansible fails to properly sanitize fact variables sent from the Ansible controller</title>
    <updated>2026-09-29T03:12:43.791558+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ghsa-jg4f-jqm5-4mgq"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/pysec-2018-38</id>
    <title>PYSEC-2018-38</title>
    <updated>2026-09-29T03:12:43.791602+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/pysec-2018-38"/>
  </entry>
</feed>
