PyPI/ansible-core CVE-2023-5764: medium 6.6, EPSS 0.57%

Ansible template injection vulnerability

Action: Upgrade ansible-core to 2.14.12 or later.

pip install ansible-core==2.14.12

pip install ansible-core==2.15.8

pip install ansible-core==2.16.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1122
• https://nvd.nist.gov/vuln/detail/CVE-2023-5764
• https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f
• https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a
• https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1
• https://access.redhat.com/errata/RHSA-2023:7773
• https://access.redhat.com/security/cve/CVE-2023-5764
• https://bugzilla.redhat.com/show_bug.cgi?id=2247629
• https://github.com/ansible/ansible
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU
• https://pypi.org/project/ansible-core
• https://github.com/advisories/GHSA-7j69-qfc3-2fq9

CVE-2023-5764 · published 2026-07-07T11:45:28.392678Z · modified 2026-07-07T17:46:19.568991776Z · JSON