Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.
"https://github.com/pypa/advisory-database/blob/main/vulns/ansible/PYSEC-2018-36.yaml"