{"action":"Upgrade ansible-core to 2.16.14rc1 or later.","affected":[{"fixed":"2.18.1rc1","introduced":"2.18.0b1"},{"fixed":"2.17.7rc1","introduced":"2.17.0b1"},{"fixed":"2.16.14rc1","introduced":"0"}],"component":"ansible-core","cve_ids":["CVE-2024-11079"],"ecosystem":"PyPI","epss":0.00529,"exploited":false,"fixed_versions":["2.18.1rc1","2.17.7rc1","2.16.14rc1"],"ghsa_id":"GHSA-99w6-3xph-cx78","id":"tcs_01M5KFADYV6J9TYRAF6DW2JJBE","modified_at":"2026-09-10T03:50:20.629633895Z","published_at":"2024-11-12T00:30:36Z","references":["https://osv.dev/vulnerability/GHSA-99w6-3xph-cx78","https://nvd.nist.gov/vuln/detail/CVE-2024-11079","https://github.com/ansible/ansible/pull/84299","https://github.com/ansible/ansible/pull/84339","https://github.com/ansible/ansible/commit/2936b80dbbc7efb889934aeec80f6142c10266ce","https://github.com/ansible/ansible/commit/70e83e72b43e05e57eb42a6d52d01a4d9768f510","https://github.com/ansible/ansible/commit/98774d15d7748ebaaaf2e83942cc7e8d39f7280e","https://access.redhat.com/errata/RHSA-2024:10770","https://access.redhat.com/errata/RHSA-2024:11145","https://access.redhat.com/security/cve/CVE-2024-11079","https://bugzilla.redhat.com/show_bug.cgi?id=2325171","https://github.com/ansible/ansible","https://github.com/ansible/ansible/blob/v2.18.1/changelogs/CHANGELOG-v2.18.rst#security-fixes","https://lists.debian.org/debian-lts-announce/2026/03/msg00006.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-99w6-3xph-cx78","url":"https://osv.dev/vulnerability/GHSA-99w6-3xph-cx78"}],"summary":"Ansible-Core vulnerable to content protections bypass"}