PyPI/ansible-core CVE-2024-0690: medium 5, EPSS 0.30%

Ansible-core information disclosure flaw

Action: Upgrade ansible-core to 2.14.14 or later.

pip install ansible-core==2.14.14

pip install ansible-core==2.16.3

pip install ansible-core==2.15.9

Affected

Fixed versions

Sources

• osv: GHSA-h24r-m9qc-pvpg
• https://nvd.nist.gov/vuln/detail/CVE-2024-0690
• https://github.com/ansible/ansible/pull/82565
• https://github.com/ansible/ansible/commit/6935c8e303440addd3871ecf8e04bde61080b032
• https://github.com/ansible/ansible/commit/78db3a3de6b40fb52d216685ae7cb903c609c3e1
• https://github.com/ansible/ansible/commit/b9a03bbf5a63459468baf8895ff74a62e9be4532
• https://github.com/ansible/ansible/commit/beb04bc2642c208447c5a936f94310528a1946b1
• https://access.redhat.com/errata/RHSA-2024:0733
• https://access.redhat.com/errata/RHSA-2024:2246
• https://access.redhat.com/errata/RHSA-2024:3043
• https://access.redhat.com/security/cve/CVE-2024-0690
• https://bugzilla.redhat.com/show_bug.cgi?id=2259013
• https://github.com/ansible/ansible
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible-core/PYSEC-2024-36.yaml
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZQGCRDSZL7ONCULMB6ZUHOE4L44KIBP
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDYSWOCPZMNRU5LWKIEBW4WGWLMTU7WQ
• https://security.netapp.com/advisory/ntap-20250117-0001

CVE-2024-0690 · published 2024-02-06T12:30:31Z · modified 2026-06-09T13:05:25Z · JSON