An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8647.json"