-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of no_log values in result formatting. The commit diff shows critical changes in _return_formatted() where boolean/None values are preserved before no_log filtering and restored afterward. This indicates the original implementation's remove_values() call would mask booleans like changed=False if they matched no_log patterns (e.g., if a vault secret was 'False'), while failing to properly mask actual secrets. The associated tests in module_that_has_secret.py validate this fix by ensuring booleans remain visible while secrets are masked.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ansible-core | pip | >= 2.17.0b1, < 2.17.6 | 2.17.6 |
| ansible-core | pip | < 2.16.13 | 2.16.13 |
PythonPythonOngoing coverage of React2Shell