Safety CI > inhumantsar/python-ansible-vault-rekey

pyup-pin-ansible-7.5.0

2 years ago

Pin ansible to latest version 7.5.0

click 7.1.2 and ansible 7.5.0 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

pyup-pin-ansible-7.4.0

2 years, 1 month ago

a96c4329

Pin ansible to latest version 7.4.0

click 7.1.2 and ansible 7.4.0 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

pyup-pin-ansible-7.3.0

2 years, 2 months ago

2ca96be2

Pin ansible to latest version 7.3.0

click 7.1.2 and ansible 7.3.0 have known security vulnerabilities.

Package	Installed	Affected	Info
click	7.1.2	<8.0.0	show Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'. https://github.com/pallets/click/issues/1752

pyup-pin-ansible-6.4.0

2 years, 8 months ago

1cf4ef7b

Pin ansible to latest version 6.4.0

click 7.1.2 and ansible 6.4.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

6.4.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-6.3.0

2 years, 8 months ago

7f10bf72

Pin ansible to latest version 6.3.0

click 7.1.2 and ansible 6.3.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

6.3.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-6.2.0

2 years, 9 months ago

126d4186

Pin ansible to latest version 6.2.0

click 7.1.2 and ansible 6.2.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

6.2.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-6.1.0

2 years, 10 months ago

08cd11e4

Pin ansible to latest version 6.1.0

click 7.1.2 and ansible 6.1.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

6.1.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-6.0.0

2 years, 10 months ago

92e40013

Pin ansible to latest version 6.0.0

click 7.1.2 and ansible 6.0.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

6.0.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-5.9.0

2 years, 11 months ago

8e88e185

Pin ansible to latest version 5.9.0

click 7.1.2 and ansible 5.9.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

5.9.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-5.8.0

2 years, 12 months ago

2942f207

Pin ansible to latest version 5.8.0

click 7.1.2 and ansible 5.8.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

5.8.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-5.7.1

3 years ago

f75b9816

Pin ansible to latest version 5.7.1

click 7.1.2 and ansible 5.7.1 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

5.7.1

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-5.7.0

3 years ago

35ca2b6c

Pin ansible to latest version 5.7.0

click 7.1.2 and ansible 5.7.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

5.7.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-ansible-5.6.0

3 years, 1 month ago

20995bf7

Pin ansible to latest version 5.6.0

click 7.1.2 and ansible 5.6.0 have known security vulnerabilities.

Package

Installed

Affected

Info

click

7.1.2

<8.0.0

show

Click 8.0.0 uses 'mkstemp()' instead of the deprecated & insecure 'mktemp()'.
https://github.com/pallets/click/issues/1752

ansible

5.6.0

>=2.5.0a1,<7.0.0

show

A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

pyup-pin-click-8.1.2

3 years, 1 month ago

a8f866ee

Pin click to latest version 8.1.2

ansible 2.9.27 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	2.9.27	<2.10.5	show A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability. This CVE affects community.aws before 1.2.1 and Ansible-build-data ships this dependency on versions before 2.10.5.
ansible	2.9.27	>=2.5.0a1,<7.0.0	show A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
ansible	2.9.27	>=0,<2.10.0	show An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
ansible	2.9.27	<2.10.5	show A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality. This CVE affects community.aws before 1.2.1 and Ansible-build-data ships this dependency on versions before 2.10.5.

pyup-pin-click-8.1.1

3 years, 1 month ago

3f2d9627

Pin click to latest version 8.1.1

ansible 2.9.27 has known security vulnerabilities.

Package	Installed	Affected	Info
ansible	2.9.27	<2.10.5	show A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability. This CVE affects community.aws before 1.2.1 and Ansible-build-data ships this dependency on versions before 2.10.5.
ansible	2.9.27	>=2.5.0a1,<7.0.0	show A flaw was found in Ansible in the amazon.aws collection when using the `tower_callback` parameter from the `amazon.aws.ec2_instance` module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
ansible	2.9.27	>=0,<2.10.0	show An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
ansible	2.9.27	<2.10.5	show A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality. This CVE affects community.aws before 1.2.1 and Ansible-build-data ships this dependency on versions before 2.10.5.