https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T16:34:29.750774+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-1734 CVE-2020-1734 2026-10-07T16:34:29.791031+00:00

Affected: Red Hat Ansible

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.

 https://vulnerability.circl.lu/vuln/ghsa-h39q-95q5-9jfp GHSA-h39q-95q5-9jfp — OS Command Injection in ansible 2026-10-07T16:34:29.791122+00:00

Affected: PyPI: ansible

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses `subprocess.Popen()` with `shell=True`, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.

 https://vulnerability.circl.lu/vuln/pysec-2020-6 PYSEC-2020-6 2026-10-07T16:34:29.791160+00:00

Affected: PyPI: ansible

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.