linkvt/k3s-ansible

API keys, passwords or tokens committed into the repo.

Nothing found by this check. ✓

via Gitleaks v8.21.2 · MIT

Packages you depend on that have known security holes (CVEs).

• Worth fixing CVE-2024-8775 ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-8775). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-11332 ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-11332). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-9902 ansible-core: Ansible-core user may read/write unauthorized content
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-9902). Fix: Update that package to its patched version.
• Worth fixing CVE-2023-50782 python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659
  requirements.txt
  A package you depend on has a known security hole (CVE-2023-50782). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-26130 python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-26130). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-26007 cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-26007). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-69249 python-cryptography is a package designed to expose cryptographic prim ...
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-69249). Fix: Update that package to its patched version.
• Worth fixing GHSA-537c-gmf6-5ccf Vulnerable OpenSSL included in cryptography wheels
  requirements.txt
  A package you depend on has a known security hole (GHSA-537c-gmf6-5ccf). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-0727 openssl: denial of service via null dereference
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-0727). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-69248 cryptography is a package designed to expose cryptographic primitives ...
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-69248). Fix: Update that package to its patched version.
• Worth fixing GHSA-h4gh-qq45-vh27 pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
  requirements.txt
  A package you depend on has a known security hole (GHSA-h4gh-qq45-vh27). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-68146 filelock: filelock: Time-of-Check-Time-of-Use (TOCTOU) race condition and symlink attack allows arbitrary file corruption or truncation
  requirements.txt
  A package you depend on has a known security hole (CVE-2025-68146). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-22701 filelock: filelock Time-of-Check-Time-of-Use (TOCTOU) in SoftFileLock
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-22701). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-3651 python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-3651). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-45409 python-idna: idna: Denial of Service via specially crafted long inputs
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-45409). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-34064 jinja2: accepts keys containing non-attribute characters
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-34064). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-56201 jinja2: Jinja has a sandbox breakout through malicious filenames
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-56201). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-56326 jinja2: Jinja has a sandbox breakout through indirect reference to format method
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-56326). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-27516 jinja2: Jinja sandbox breakout through attr filter selecting format method
  requirements.txt
  A package you depend on has a known security hole (CVE-2025-27516). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-30922 pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-30922). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-59884 python-pyasn1: pyasn1: Denial of Service via crafted BER input
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-59884). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-59885 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-59885). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-59886 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
  requirements.txt
  A package you depend on has a known security hole (CVE-2026-59886). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-35195 requests: subsequent requests to the same host ignore cert verification
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-35195). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-47081 requests: Requests vulnerable to .netrc credentials leak via malicious URLs
  requirements.txt
  A package you depend on has a known security hole (CVE-2024-47081). Fix: Update that package to its patched version.

via Trivy v0.70.0 · Apache-2.0

Your dependencies cross-checked against the OSV vulnerability database.

• Serious PYSEC-2024-187 virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-53899). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1121 ansible-core Incorrect Authorization vulnerability
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-9902). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1123 Ansible-Core vulnerable to content protections bypass
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-11079). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1124 Ansible vulnerable to Insertion of Sensitive Information into Log File
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-8775). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-3458 ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-11332). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2024-230 Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-39689). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-2132 Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-7246). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2024-225 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificate
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-26130). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1283 Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2023-50782). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1285 Null pointer dereference in PKCS12 parsing
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-0727). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-2141 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), Ellip
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-26007). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-35 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child cert
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-34073). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-3553 python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-69249). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-3554 python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-69248). Fix: Update that package to its patched version.
• Worth fixing GHSA-537c-gmf6-5ccf Vulnerable OpenSSL included in cryptography wheels
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1374 filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-22701). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1375 filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2025-68146). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2024-60 A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings,
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-3651). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-215 Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-45409). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1471 Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2025-27516). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1472 Jinja has a sandbox breakout through malicious filenames
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-56201). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1474 Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-34064). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-1475 Jinja has a sandbox breakout through indirect reference to format method
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2024-56326). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-2263 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deep
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-30922). Fix: Update that package to its patched version.
• Worth fixing PYSEC-2026-3455 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the t
  /workdirs/scan-b35fdbd4-a064-4006-841f-8d07bcead5b7/requirements.txt
  A package you depend on has a known security hole (CVE-2026-59884). Fix: Update that package to its patched version.

via OSV-Scanner v1.9.2 · Apache-2.0

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: pypi:timeout