{"action":"Upgrade ansible to 2.8.19rc1 or later.","affected":[{"fixed":"2.10.6rc1","introduced":"2.10.0a1"},{"fixed":"2.9.18rc1","introduced":"2.9.0a1"},{"fixed":"2.8.19rc1","introduced":"0"}],"component":"ansible","cve_ids":["CVE-2021-20228"],"ecosystem":"PyPI","epss":0.0206,"exploited":false,"fixed_versions":["2.10.6rc1","2.9.18rc1","2.8.19rc1"],"ghsa_id":"GHSA-5rrg-rr89-x9mv","id":"tcs_01M5KF1PWS17V3AV881MYKNWSD","modified_at":"2024-09-09T21:20:55.682080Z","published_at":"2022-05-25T19:22:34Z","references":["https://osv.dev/vulnerability/GHSA-5rrg-rr89-x9mv","https://nvd.nist.gov/vuln/detail/CVE-2021-20228","https://github.com/ansible/ansible/pull/73487","https://github.com/ansible/ansible/pull/73492","https://github.com/ansible/ansible/pull/73493","https://github.com/ansible/ansible/pull/73494","https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c","https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b","https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120","https://bugzilla.redhat.com/show_bug.cgi?id=1925002","https://github.com/advisories/GHSA-5rrg-rr89-x9mv","https://github.com/ansible/ansible","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml","https://www.debian.org/security/2021/dsa-4950"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5rrg-rr89-x9mv","url":"https://osv.dev/vulnerability/GHSA-5rrg-rr89-x9mv"}],"summary":"Ansible Exposes Sensitive Information"}