VYPR

Galaxy Collections

by Ansible

CVEs (1)

  • CVE-2021-3681MedApr 18, 2022
    risk 0.36cvss 5.5epss 0.00

    A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains sensitive info, such as…