An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
"https://github.com/pypa/advisory-database/blob/main/vulns/ansible/PYSEC-2018-58.yaml"