{"action":"Upgrade ansible to 2.9.23rc1 or later.","affected":[{"fixed":"2.9.23rc1","introduced":"0"},{"fixed":"2.10.11rc1","introduced":"2.10.0a1"},{"fixed":"2.11.2rc1","introduced":"2.11.0a1"}],"component":"ansible","cve_ids":["CVE-2021-3583"],"ecosystem":"PyPI","epss":0.00897,"exploited":false,"fixed_versions":["2.9.23rc1","2.10.11rc1","2.11.2rc1"],"ghsa_id":"GHSA-2pfh-q76x-gwvm","id":"tcs_01M5KESZNHFBZDMEBZVT5FKEYX","modified_at":"2024-09-06T18:01:00.918391Z","published_at":"2021-09-23T23:16:38Z","references":["https://osv.dev/vulnerability/GHSA-2pfh-q76x-gwvm","https://nvd.nist.gov/vuln/detail/CVE-2021-3583","https://github.com/ansible/ansible/pull/74960","https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e","https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847","https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1","https://bugzilla.redhat.com/show_bug.cgi?id=1968412","https://github.com/advisories/GHSA-2pfh-q76x-gwvm","https://github.com/ansible/ansible","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml","https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-2pfh-q76x-gwvm","url":"https://osv.dev/vulnerability/GHSA-2pfh-q76x-gwvm"}],"summary":"Improper Input Validation and Command Injection in Ansible"}