PyPI/ansible CVE-2014-2686: unknown, EPSS 1.19%

Ansible prior to 1.5.4 mishandles the evaluation of some strings.

Action: Upgrade ansible to 1.5.4 or later.

pip install ansible==1.5.4

Affected

Fixed versions

Sources

• osv: PYSEC-2020-198
• https://groups.google.com/forum/#!searchin/ansible-project/1.5.4/ansible-project/MUQxiKwSQDc/id6aVaawVboJ
• https://github.com/advisories/GHSA-49m5-2838-q2rv

CVE-2014-2686 · published 2020-01-09T13:15:00Z · modified 2026-06-10T17:00:05.535063338Z · JSON