PyPI/ansible-core CVE-2023-5764: medium 6.6, EPSS 0.54%

Ansible template injection vulnerability

Action: Upgrade ansible-core to 2.14.12 or later.

pip install ansible-core==2.16.1

pip install ansible-core==2.15.8

pip install ansible-core==2.14.12

Affected

Fixed versions

Sources

• osv: GHSA-7j69-qfc3-2fq9
• https://nvd.nist.gov/vuln/detail/CVE-2023-5764
• https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f
• https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a
• https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1
• https://access.redhat.com/errata/RHSA-2023:7773
• https://access.redhat.com/security/cve/CVE-2023-5764
• https://bugzilla.redhat.com/show_bug.cgi?id=2247629
• https://github.com/ansible/ansible
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU

CVE-2023-5764 · published 2023-12-13T00:30:37Z · modified 2026-07-07T17:56:54.135865376Z · JSON