Known Vulnerabilities for Ansible-vault by Ansible-vault Project
Listed below are 1 of the newest known vulnerabilities associated with "Ansible-vault" by "Ansible-vault Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-11807 json | A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rule... | Not Provided | 2026-06-23 | 2026-07-16 |
| CVE-2017-2809 json | An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vaul... | 7.8 - HIGH | 2017-09-14 | 2022-04-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ansible-vault Project | Ansible-vault | 2.0.0 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.2.0 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.1.2 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.1.1 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.1.0 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.5 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.4 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.3 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.2 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.1 | |||
| Application | Ansible-vault Project | Ansible-vault | 1.0.0 |