{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.16"}],"component":"galaxy-importer","cve_ids":["CVE-2023-5189"],"ecosystem":"PyPI","epss":0.00982,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-55g2-vm3q-7w52","id":"tcs_01M5KGSCW7ZYXM38XG9WAXM9N2","modified_at":"2026-07-07T17:46:43.184056072Z","published_at":"2026-07-07T11:45:26.817403Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1401","https://nvd.nist.gov/vuln/detail/CVE-2023-5189","https://access.redhat.com/errata/RHSA-2023:7773","https://access.redhat.com/errata/RHSA-2024:1536","https://access.redhat.com/errata/RHSA-2024:2010","https://access.redhat.com/security/cve/CVE-2023-5189","https://bugzilla.redhat.com/show_bug.cgi?id=2234387","https://github.com/ansible/galaxy-importer","https://github.com/ansible/galaxy-importer/blob/2c5c7c05fdfb0835878234b36de32902c703616d/galaxy_importer/collection.py#L160-L165","https://pypi.org/project/galaxy-importer","https://github.com/advisories/GHSA-55g2-vm3q-7w52"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1401","url":"https://osv.dev/vulnerability/PYSEC-2026-1401"}],"summary":"Ansible galaxy-importer Path Traversal vulnerability"}