Threats tagged 'ghsa-v4rq-68gg-vw4c'

Ansible-core versions starting from 2.19 introduced a regression where tasks marked with no_log: true still leak sensitive information in their exception messages. This occurs because the exception field is preserved and printed by default, exposing secret values in error outputs such as argument-validation errors, templating errors, and assertion failures. The issue does not exist in version 2.16, where error texts are properly censored.