salt vulnerabilities (PyPI)
69 vulnerabilities.
-
saltPyPI Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
saltPyPI Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
saltPyPI CVE-2024-38824 salt advisory 9.6 Critical -
saltPyPI CVE-2025-22242 salt advisory 5.6 Medium -
saltPyPI CVE-2025-22241 salt advisory 5.6 Medium -
saltPyPI CVE-2025-22240 salt advisory 6.3 Medium -
saltPyPI CVE-2025-22239 salt advisory 8.1 High -
saltPyPI CVE-2025-22238 salt advisory 4.2 Medium -
saltPyPI CVE-2025-22237 salt advisory 6.7 Medium -
saltPyPI CVE-2025-22236 salt advisory 8.1 High -
saltPyPI CVE-2024-38825 Salt Advisory 6.4 Medium -
saltPyPI Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
saltPyPI Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
saltPyPI Salt security advisory release - 2023-OCT-27 6.7 Medium -
saltPyPI Salt can cause Git Providers to get wrong data 4.2 Medium -
saltPyPI Salt vulnerable to denial of service 5.3 Medium -
saltPyPI Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary... 9.8 Critical -
saltPyPI Salt's PAM auth fails to reject locked accounts 8.8 High -
saltPyPI SaltStack Salt Permissions Bypass 8.8 High -
saltPyPI SaltStack Salt Authentication Bypass by Capture-replay 8.8 High -
saltPyPI SaltStack Salt Improper Authentication via Man in the Middle Attack 3.7 Low -
saltPyPI SaltStack Improper Verification of Cryptographic Signature 8.8 High -
saltPyPI Improper Authentication in SaltStack Salt 6.4 Medium -
saltPyPI Exposure of Resource to Wrong Sphere in salt 7.5 High -
saltPyPI Command Injection in SaltStack Salt 7.8 High -
saltPyPI salt-api unauthenticated remote code execution 9.8 Critical -
saltPyPI SaltStack Salt is vulnerable to shell injection via ProxyCommand argument 9.8 Critical -
saltPyPI SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 9.8 Critical -
saltPyPI SaltStack Salt eauth tokens can be used once after expiration 9.1 Critical -
saltPyPI SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod 4.4 Medium -
saltPyPI SaltStack Salt Server Side Template Injection 9.8 Critical -
saltPyPI SaltStack Salt Directory Traversal vulnerability 9.1 Critical -
saltPyPI SaltStack Salt Improper Authentication vulnerability 9.8 Critical -
saltPyPI SaltStack Salt Improper SSL Certificate Validation 7.4 High -
saltPyPI SaltStack Salt Improper Certificate Validation 5.9 Medium -
saltPyPI SaltStack Salt command injection via a crafted process name 7.8 High -
saltPyPI SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
saltPyPI SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
saltPyPI SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
saltPyPI SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium -
saltPyPI SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical -
saltPyPI SaltStack Salt is vulnerable to command injection 9.8 Critical -
saltPyPI SaltStack RSA Key Generation allows remote users to decrypt communications 8.1 High -
saltPyPI SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function 9.8 Critical -
saltPyPI SaltStack Salt Remote command execution and incorrect access control when using salt-api 9.8 Critical -
saltPyPI SaltStack Salt Directory Traversal vulnerability in salt-api 5.3 Medium -
saltPyPI SaltStack Salt allows compromised salt-minions to impersonate the salt-master 9.8 Critical -
saltPyPI SaltStack Salt Denial of Service via a crafted authentication request 7.5 High -
saltPyPI SaltStack Salt Directory traversal vulnerability in minion id validation 9.8 Critical -
saltPyPI salt leaks git usernames and passwords to the log 6.3 Medium - Show olderLoading…