CVE-2021-20191

Medium

Advisory

Published 26 May 2021In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 6; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 2 of 3; affected packages

Insertion of Sensitive Information into Log File in ansible

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
ansiblepypi	2.5.0, 2.5.2, 2.5.3, 2.9.6+1 more	2.8.19rc1, 2.9.18rc1	7
ansibledeb	2.5.3-1ppa~trusty	no fix listed	2
ansibleapk	2.9.14-r0	2.9.18-r0	1

OSV records: ALPINE-CVE-2021-20191 GHSA-8f4m-hccc-8qph UBUNTU-CVE-2021-20191
Also known as: PYSEC-2021-124

Charts affected

6 by stars

Chart

Latest

Affected images

Radar Score

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	ansible@2.5.3-1ppa~trusty ansible@2.5.3	no fix listed 2.8.19rc1
galaxy/galaxy-stable :v18.01	8e577a626dfd	ansible@2.5.3-1ppa~trusty ansible@2.5.3	no fix listed 2.8.19rc1

Open the chart page →

70,895

wallabaggeek-cookbook

7.2.0

1 of 1 See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.4.2	5e4c26a7fb4a	ansible@2.9.14-r0 ansible@2.9.14	2.9.18-r0 2.9.18rc1

Open the chart page →

4,358

comacopencord

1.0.0

2 of 9 See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	2.8.19rc1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	ansible@2.5.0	2.8.19rc1

Open the chart page →

88,546

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	2.8.19rc1

Open the chart page →

26,211

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ansible@2.5.2	2.8.19rc1

Open the chart page →

36,215

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-20191.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	ansible@2.9.6	2.9.18rc1

Open the chart page →

11,151

Container images carrying it

7 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	2.8.19rc1	2
galaxy/galaxy-init :v18.01	0267bad550e6	ansible@2.5.3-1ppa~trusty ansible@2.5.3	no fix listed 2.8.19rc1	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	ansible@2.5.3-1ppa~trusty ansible@2.5.3	no fix listed 2.8.19rc1	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	ansible@2.5.0	2.8.19rc1	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ansible@2.5.2	2.8.19rc1	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	ansible@2.9.6	2.9.18rc1	1
wallabag/wallabag :2.4.2	5e4c26a7fb4a	ansible@2.9.14-r0 ansible@2.9.14	2.9.18-r0 2.9.18rc1	1