{"action":"Upgrade ansible-vault to 1.0.5 or later.","affected":[{"fixed":"1.0.5","introduced":"0"}],"component":"ansible-vault","cve_ids":["CVE-2017-2809"],"ecosystem":"PyPI","epss":0.02991,"exploited":false,"fixed_versions":["1.0.5"],"ghsa_id":"GHSA-c2w9-48qc-qpj4","id":"tcs_01M5KFBZE2830F5K2X17XBVE18","modified_at":"2024-09-03T21:31:12.314389Z","published_at":"2018-07-13T15:16:54Z","references":["https://osv.dev/vulnerability/GHSA-c2w9-48qc-qpj4","https://nvd.nist.gov/vuln/detail/CVE-2017-2809","https://github.com/tomoh1r/ansible-vault/issues/4","https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04","https://github.com/advisories/GHSA-c2w9-48qc-qpj4","https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml","https://github.com/tomoh1r/ansible-vault","https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt","https://web.archive.org/web/20171206173637/http://www.securityfocus.com/bid/100824","https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-c2w9-48qc-qpj4","url":"https://osv.dev/vulnerability/GHSA-c2w9-48qc-qpj4"}],"summary":"Code injection in ansible"}