{"action":"Upgrade ansible to 2.10.1 or later.","affected":[{"fixed":"2.10.1","introduced":"0"}],"component":"ansible","cve_ids":["CVE-2020-25635"],"ecosystem":"PyPI","epss":0.00319,"exploited":false,"fixed_versions":["2.10.1"],"ghsa_id":"GHSA-f556-49jc-4rvc","id":"tcs_01M5KG9W3JAA4SKJV1F41P792T","modified_at":"2026-06-10T17:00:05.504242268Z","published_at":"2020-10-05T14:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-220","https://github.com/ansible-collections/community.aws/issues/222","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635","https://github.com/advisories/GHSA-f556-49jc-4rvc"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2020-220","url":"https://osv.dev/vulnerability/PYSEC-2020-220"},{"source":"nvd","source_id":"CVE-2020-25635","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25635"}],"summary":"A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Thi"}