{"action":"Upgrade ansible to 2.8.13 or later.","affected":[{"fixed":"2.10.0rc1","introduced":"2.10.0a1"},{"fixed":"2.9.11","introduced":"2.9.0a1"},{"fixed":"2.8.13","introduced":"0"}],"component":"ansible","cve_ids":["CVE-2020-1734"],"ecosystem":"PyPI","epss":0.00458,"exploited":false,"fixed_versions":["2.10.0rc1","2.9.11","2.8.13"],"ghsa_id":"GHSA-h39q-95q5-9jfp","id":"tcs_01M5KFJMP83S0GQJ7R755TST69","modified_at":"2024-09-10T22:30:52.559547Z","published_at":"2022-02-09T00:11:19Z","references":["https://osv.dev/vulnerability/GHSA-h39q-95q5-9jfp","https://nvd.nist.gov/vuln/detail/CVE-2020-1734","https://github.com/ansible/ansible/issues/67792","https://github.com/ansible/ansible/issues/70159","https://github.com/ansible/ansible/pull/70596","https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b","https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0","https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f","https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0","https://access.redhat.com/errata/RHBA-2020:0547","https://access.redhat.com/errata/RHBA-2020:1539","https://access.redhat.com/security/cve/CVE-2020-1734","https://bugzilla.redhat.com/show_bug.cgi?id=1801804","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734","https://github.com/advisories/GHSA-h39q-95q5-9jfp","https://github.com/ansible/ansible","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-h39q-95q5-9jfp","url":"https://osv.dev/vulnerability/GHSA-h39q-95q5-9jfp"}],"summary":"OS Command Injection in ansible"}