[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-16493":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":39,"aliases":40,"duplicate_of":9,"upstream":43,"downstream":44,"duplicates":56,"related":57,"reserved_at":9,"published_at":60,"modified_at":61,"state":62,"summary":63,"references_raw":72,"kevs":114,"epss":115,"epss_history":118,"metrics":297,"affected":309},"CVE-2026-16493","A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs 'ansible-galaxy collection install' with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-88","Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","The product constructs a string for a command to be executed by a separate component\nin another control sphere, but it does not properly delimit the\nintended arguments, options, or switches within that command string.","weakness","Draft","Base",[19,23,27,31,35],{"id":20,"name":21,"techniques":22},"CAPEC-137","Parameter Injection",[],{"id":24,"name":25,"techniques":26},"CAPEC-174","Flash Parameter Injection",[],{"id":28,"name":29,"techniques":30},"CAPEC-41","Using Meta-characters in E-mail Headers to Inject Malicious Payloads",[],{"id":32,"name":33,"techniques":34},"CAPEC-460","HTTP Parameter Pollution (HPP)",[],{"id":36,"name":37,"techniques":38},"CAPEC-88","OS Command Injection",[],[],[41,42],"UBUNTU-CVE-2026-16493","DEBIAN-CVE-2026-16493",[],[45,46,48,50,52,54],{"_key":42},{"_key":47},"OPENSUSE-SU-2026:21828-1",{"_key":49},"SUSE-SU-2026:4154-1",{"_key":51},"RHSA-2026:63385",{"_key":53},"RHSA-2026:63386",{"_key":55},"RHSA-2026:63387",[],[58,59],{"_key":47},{"_key":49},"2026-07-21T17:26:14.394Z","2026-09-04T02:01:21.499Z","Awaiting Analysis",{"cisa_kev":64,"cisa_ransomware":64,"cisa_vendor":9,"epss_severity":65,"epss_score":66,"severity":67,"severity_score":68,"severity_version":69,"severity_source":70,"severity_vector":71,"severity_status":62},false,"low",0.00174,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",[73,80,87,91,95,101,106,110],{"url":74,"sources":75,"tags":77},"https://access.redhat.com/security/cve/CVE-2026-16493",[70,76],"nvd",[78,79],"VDB Entry","X Refsource REDHAT",{"url":81,"sources":82,"tags":84},"https://bugzilla.redhat.com/show_bug.cgi?id=2503724",[70,76,83],"osv_ubuntu",[85,79,86],"Issue Tracking","REPORT",{"url":88,"sources":89,"tags":90},"https://ubuntu.com/security/CVE-2026-16493",[83],[86],{"url":92,"sources":93,"tags":94},"https://www.cve.org/CVERecord?id=CVE-2026-16493",[83],[86],{"url":96,"sources":97,"tags":99},"https://security-tracker.debian.org/tracker/CVE-2026-16493",[98],"osv_debian",[100],"Advisory",{"url":102,"sources":103,"tags":104},"https://access.redhat.com/errata/RHSA-2026:63387",[70,76],[105,79],"Vendor Advisory",{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2026:63385",[70,76],[105,79],{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:63386",[70,76],[105,79],[],{"date":116,"score":66,"percentile":117},"2026-09-19",0.07222,[119,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,275,278,281,284,287,290,293,296],{"date":120,"score":121,"percentile":122},"2026-07-22",0.00316,0.23832,{"date":124,"score":121,"percentile":125},"2026-07-23",0.23811,{"date":127,"score":121,"percentile":128},"2026-07-24",0.2383,{"date":130,"score":121,"percentile":131},"2026-07-25",0.23911,{"date":133,"score":121,"percentile":134},"2026-07-26",0.23934,{"date":136,"score":121,"percentile":137},"2026-07-27",0.23914,{"date":139,"score":121,"percentile":140},"2026-07-28",0.23977,{"date":142,"score":121,"percentile":143},"2026-07-29",0.23981,{"date":145,"score":121,"percentile":146},"2026-07-30",0.24028,{"date":148,"score":121,"percentile":149},"2026-07-31",0.24032,{"date":151,"score":121,"percentile":152},"2026-08-01",0.24035,{"date":154,"score":121,"percentile":155},"2026-08-02",0.24036,{"date":157,"score":121,"percentile":158},"2026-08-03",0.24046,{"date":160,"score":121,"percentile":161},"2026-08-04",0.24,{"date":163,"score":121,"percentile":164},"2026-08-05",0.23953,{"date":166,"score":121,"percentile":167},"2026-08-06",0.23976,{"date":169,"score":121,"percentile":170},"2026-08-07",0.24004,{"date":172,"score":121,"percentile":173},"2026-08-08",0.24005,{"date":175,"score":121,"percentile":176},"2026-08-09",0.23995,{"date":178,"score":121,"percentile":179},"2026-08-10",0.24007,{"date":181,"score":121,"percentile":182},"2026-08-11",0.241,{"date":184,"score":121,"percentile":185},"2026-08-12",0.24157,{"date":187,"score":121,"percentile":188},"2026-08-13",0.2419,{"date":190,"score":121,"percentile":191},"2026-08-14",0.24231,{"date":193,"score":121,"percentile":194},"2026-08-15",0.2438,{"date":196,"score":121,"percentile":197},"2026-08-16",0.24409,{"date":199,"score":121,"percentile":200},"2026-08-17",0.24321,{"date":202,"score":121,"percentile":203},"2026-08-18",0.24341,{"date":205,"score":121,"percentile":206},"2026-08-19",0.24442,{"date":208,"score":121,"percentile":209},"2026-08-20",0.24495,{"date":211,"score":121,"percentile":212},"2026-08-21",0.24528,{"date":214,"score":121,"percentile":215},"2026-08-22",0.24535,{"date":217,"score":121,"percentile":218},"2026-08-23",0.24486,{"date":220,"score":121,"percentile":221},"2026-08-24",0.23785,{"date":223,"score":121,"percentile":224},"2026-08-25",0.23804,{"date":226,"score":121,"percentile":227},"2026-08-26",0.23876,{"date":229,"score":121,"percentile":230},"2026-08-27",0.23888,{"date":232,"score":121,"percentile":233},"2026-08-28",0.2388,{"date":235,"score":121,"percentile":236},"2026-08-29",0.23907,{"date":238,"score":121,"percentile":239},"2026-08-30",0.23973,{"date":241,"score":121,"percentile":242},"2026-08-31",0.2396,{"date":244,"score":121,"percentile":245},"2026-09-01",0.23983,{"date":247,"score":121,"percentile":248},"2026-09-02",0.24011,{"date":250,"score":121,"percentile":251},"2026-09-03",0.24034,{"date":253,"score":66,"percentile":254},"2026-09-04",0.06999,{"date":256,"score":66,"percentile":257},"2026-09-05",0.07017,{"date":259,"score":66,"percentile":260},"2026-09-06",0.07035,{"date":262,"score":66,"percentile":263},"2026-09-07",0.07026,{"date":265,"score":66,"percentile":266},"2026-09-08",0.07007,{"date":268,"score":66,"percentile":269},"2026-09-09",0.07042,{"date":271,"score":66,"percentile":272},"2026-09-10",0.07032,{"date":274,"score":66,"percentile":260},"2026-09-11",{"date":276,"score":66,"percentile":277},"2026-09-12",0.07088,{"date":279,"score":66,"percentile":280},"2026-09-13",0.07083,{"date":282,"score":66,"percentile":283},"2026-09-14",0.07095,{"date":285,"score":66,"percentile":286},"2026-09-15",0.07127,{"date":288,"score":66,"percentile":289},"2026-09-16",0.07171,{"date":291,"score":66,"percentile":292},"2026-09-17",0.07196,{"date":294,"score":66,"percentile":295},"2026-09-18",0.07208,{"date":116,"score":66,"percentile":117},[298,303,305,307],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":299,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":300,"vectorString":71,"impactScore":301,"exploitabilityScore":302},"HIGH",9.8,4.6,{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":304,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":300,"vectorString":71,"impactScore":301,"exploitabilityScore":302},{"source":83,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":306,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":9,"vectorString":71,"impactScore":301,"exploitabilityScore":302},{"source":98,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":308,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":9,"vectorString":71,"impactScore":301,"exploitabilityScore":302},[310,326,332,339],{"ecosystem":311,"name":312,"vendor":313,"product":312,"cpe_part":9,"purl_type":314,"purl_namespace":313,"purl_name":312,"source":9,"versions":315},"Debian","ansible","debian","deb",[316,320,324,325],{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":321,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":322,"version_end_type":323,"fixed_in":9},"lt5_4_0_1","5.4.0-1","excluding",{"version":321,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":322,"version_end_type":323,"fixed_in":9},{"version":321,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":322,"version_end_type":323,"fixed_in":9},{"ecosystem":311,"name":327,"vendor":313,"product":327,"cpe_part":9,"purl_type":314,"purl_namespace":313,"purl_name":327,"source":9,"versions":328},"ansible-core",[329,330,331],{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":333,"name":312,"vendor":334,"product":312,"cpe_part":9,"purl_type":314,"purl_namespace":334,"purl_name":312,"source":9,"versions":335},"Ubuntu","ubuntu",[336,337,338],{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":333,"name":327,"vendor":334,"product":327,"cpe_part":9,"purl_type":314,"purl_namespace":334,"purl_name":327,"source":9,"versions":340},[341,342,343],{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":317,"is_range":318,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]