{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.16"}],"component":"galaxy-importer","cve_ids":["CVE-2023-5189"],"ecosystem":"PyPI","epss":0.00982,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-55g2-vm3q-7w52","id":"tcs_01M5KF01MPRRQQTHHRX6PK3T5K","modified_at":"2026-07-07T17:56:36.437671013Z","published_at":"2023-11-15T00:31:08Z","references":["https://osv.dev/vulnerability/GHSA-55g2-vm3q-7w52","https://nvd.nist.gov/vuln/detail/CVE-2023-5189","https://access.redhat.com/errata/RHSA-2023:7773","https://access.redhat.com/errata/RHSA-2024:1536","https://access.redhat.com/errata/RHSA-2024:2010","https://access.redhat.com/security/cve/CVE-2023-5189","https://bugzilla.redhat.com/show_bug.cgi?id=2234387","https://github.com/ansible/galaxy-importer","https://github.com/ansible/galaxy-importer/blob/2c5c7c05fdfb0835878234b36de32902c703616d/galaxy_importer/collection.py#L160-L165"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-55g2-vm3q-7w52","url":"https://osv.dev/vulnerability/GHSA-55g2-vm3q-7w52"}],"summary":"Ansible galaxy-importer Path Traversal vulnerability"}