Workflow

PyPi: Ansible-Doctor

CVE-2023-5764

Transitive

Safety vulnerability ID: 63672

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Dec 12, 2023 Updated at Dec 10, 2024
Scan your Python projects for vulnerabilities →

Advisory

Ansible-doctor version 4.0.0 upgrades its dependency on ansible-core from version 2.13.13 to 2.14.12, in response to the identified vulnerabilities outlined in CVE-2023-5764.

Affected package

ansible-doctor

Latest version: 7.0.1

Generate documentation from annotated Ansible roles using templates.

Affected versions

Fixed versions

Vulnerability changelog

Bug Fixes

- **deps:** update dependency ansible-core to v2.14.12 [security] (633) (fe12548)

Others

- drop support for python 3.8 (634) (ae14704)

Breaking Changes

- The support for python 3.8 was removed to bundle `ansible-core` v2.14.x by default.

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

HIGH 7.8

CVSS v3 Details

HIGH 7.8
Attack Vector (AV)
LOCAL
Attack Complexity (AC)
LOW
Privileges Required (PR)
LOW
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality Impact (C)
HIGH
Integrity Impact (I)
HIGH
Availability Availability (A)
HIGH