VulertSecurity VulertSecurity

Vulnerability Database · PyPI · ansible · Version

ansible 8.2.0

8.2.0 is affected by 12 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 14.5.0.

Critical 0 High 0 Medium 5 Low 1 Unrated 6

All ansible versions & vulnerabilities → Search the database for this package →
Released 18 Jul 2023 Licence GPL-3.0-or-later Also known from other sources 0 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

ansible 8.2.0 vulnerabilities

12 vulnerabilities cover ansible 8.2.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-5115: Ansible Symlink Attack Vulnerability 6.3 medium 8.5.0 07 Jul 2026
CVE-2023-5115: Ansible symlink attack vulnerability 6.3 medium 8.5.0 28 Dec 2023
CVE-2025-14010: Ansible Community General Collection Sensitive Information Exposure Vulnerability 5.5 medium 12.2.0 07 Jul 2026
CVE-2025-14010: Ansible Community General Collection Sensitive Information Exposure 5.5 medium 12.0.0 04 Dec 2025
CVE-2020-1738: Argument Injection in Ansible 3.9 low No fix published 09 Feb 2022
CVE-2020-1736: Incorrect Permission Assignment for Critical Resource in Ansible 3.3 medium No fix published 09 Feb 2022
CVE-2021-3532: Ansible - Disclosure of Secret Information in Async Files N/A unrated No fix published 09 Jun 2021
CVE-2020-25635: Ansible Base aws_ssm Connection Plugin Data Exposure N/A unrated No fix published 05 Oct 2020
CVE-2020-25636: Ansible Base aws_ssm Connection Plugin Namespace Separation Flaw N/A unrated No fix published 05 Oct 2020
CVE-2014-4678: Ansible safe_eval Arbitrary Code Execution N/A unrated 5429b85b9f6c2e640074176f36ff05fd5e4d1916 20 Feb 2020
CVE-2014-4966: Ansible Remote Code Execution N/A unrated 62a1295a3e08cb6c3e9f1b2a1e6e5dcaeab32527 18 Feb 2020
CVE-2014-4967: Ansible - Multiple Argument Injection Vulnerabilities N/A unrated 62a1295a3e08cb6c3e9f1b2a1e6e5dcaeab32527 18 Feb 2020

Looking for another version, or everything Vulert holds for ansible?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About ansible 8.2.0

Is ansible 8.2.0 vulnerable?

Yes. 12 vulnerabilities in the Vulert database cover ansible 8.2.0: 0 critical, 0 high, 5 medium and 1 low, plus 6 not yet rated. The upgrade Vulert recommends is 14.5.0, and each entry above names the fixed version to move to.

Which version of ansible should I use instead of 8.2.0?

14.5.0 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 8.2.0 the latest release of ansible?

No. 8.2.0 was published 18 Jul 2023, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor ansible for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the ansible version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.