StackRadarChart IndexLive demo

CVE-2022-3697

High

Advisory

Published 28 Oct 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

Ansible leaks password to logs

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
ansiblepypi	2.5.0, 2.5.2, 2.5.3, 2.9.6+3 more	7.0.0	10

OSV records: GHSA-cpx3-93w7-457x
Also known as: PYSEC-2026-768

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

ansible-semaphoreansible-semaphore

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	ansible@2.10.7	7.0.0

Open the chart page →

4,019

cloudlaunchcloudve

1 of 5 See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	ansible@2.9.27	7.0.0

Open the chart page →

12,457

cloudlaunch-servercloudve

1 of 5 See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	ansible@2.9.27	7.0.0

Open the chart page →

12,131

cloudlaunchservercloudve

1 of 4 See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	ansible@2.9.27	7.0.0

Open the chart page →

11,592

galaxykubemancloudve

1 of 7 See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	ansible@2.9.27	7.0.0

Open the chart page →

16,069

galaxy-stablecloudve

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	ansible@2.5.3	7.0.0
galaxy/galaxy-stable :v18.01	8e577a626dfd	ansible@2.5.3	7.0.0

Open the chart page →

70,895

wallabaggeek-cookbook

1 of 1 See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.4.2	5e4c26a7fb4a	ansible@2.9.14	7.0.0

Open the chart page →

4,358

comacopencord

2 of 9 See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	7.0.0
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	ansible@2.5.0	7.0.0

Open the chart page →

88,546

comac-platformopencord

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	7.0.0

Open the chart page →

26,211

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ansible@2.5.2	7.0.0

Open the chart page →

36,215

gitlab-runner-operatorpnnl-miscscripts

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-3697.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	ansible@2.9.6	7.0.0

Open the chart page →

11,151

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	ansible@2.9.27	7.0.0	3
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ansible@2.5.0	7.0.0	2
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	ansible@2.10.7	7.0.0	1
galaxy/cloudman-server :latest	e5c265fe9fcd	ansible@2.9.27	7.0.0	1
galaxy/galaxy-init :v18.01	0267bad550e6	ansible@2.5.3	7.0.0	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	ansible@2.5.3	7.0.0	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	ansible@2.5.0	7.0.0	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ansible@2.5.2	7.0.0	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	ansible@2.9.6	7.0.0	1
wallabag/wallabag :2.4.2	5e4c26a7fb4a	ansible@2.9.14	7.0.0	1