The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack

The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a…

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module

Ansible prior to 1.5.4 mishandles the evaluation of some strings

A flaw was found in Ansible before version 2.2.0

Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys

A flaw was found in the solaris_zone module from the Ansible Community modules

A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers

A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting…