Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ansible/ansible-lint
main @ 9b2caa4
3
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Dependency Vulnerability: 1 prior fix. Scrutinize any change in this area.
lib/ansiblelint/rules/MissingFilePermissionsRule.py: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Dependency Vulnerability: A vulnerable version of black was used, exposing the project to CVE-2026-32274. This is the highest-severity historical issue and underscores the need for continuous dependency monitoring.
Insecure Temporary File: A hardcoded /tmp/ansible-async path is susceptible to symlink attacks and predictable filename races. The fix uses mkdtemp, but other hardcoded paths may remain.
Security Misconfiguration: The file module without mode can create files with insecure default permissions. The new lint rule helps, but other modules may have similar gaps.