https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T01:43:54.915804+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/brew-ansible-cve-2014-4966 BREW-ansible-CVE-2014-4966 2026-09-30T01:43:55.831484+00:00

Affected: Homebrew: ansible

Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data.

 https://vulnerability.circl.lu/vuln/cve-2014-4966 CVE-2014-4966 2026-09-30T01:43:55.831635+00:00

Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data.

 https://vulnerability.circl.lu/vuln/ghsa-wqq5-c89p-3wc3 GHSA-wqq5-c89p-3wc3 — Ansible Arbitrary Code Execution 2026-09-30T01:43:55.831695+00:00

Affected: PyPI: ansible

Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data.