venv-salt-minion vulnerabilities (SUSE)
106 vulnerabilities.
venv-salt-minionSUSETornado has a DoS due to too many multipart parts8.7 Highvenv-salt-minionSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highvenv-salt-minionSUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 Lowvenv-salt-minionSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumvenv-salt-minionSUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 Mediumvenv-salt-minionSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalvenv-salt-minionSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalvenv-salt-minionSUSELimited path traversal when installing wheel archives2.0 Lowvenv-salt-minionSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalvenv-salt-minionSUSEReact Router has Path Traversal in File Session Storage9.1 Criticalvenv-salt-minionSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highvenv-salt-minionSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highvenv-salt-minionSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumvenv-salt-minionSUSEExcessive read buffering DoS in http.client6.3 Mediumvenv-salt-minionSUSESalt Master authentication protocol downgrade may enable minion impersonation7.5 Highvenv-salt-minionSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highvenv-salt-minionSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumvenv-salt-minionSUSECVE-2024-38824 salt advisory9.6 Criticalvenv-salt-minionSUSECVE-2025-22242 salt advisory5.6 Mediumvenv-salt-minionSUSECVE-2025-22241 salt advisory5.6 Mediumvenv-salt-minionSUSECVE-2025-22240 salt advisory6.3 Mediumvenv-salt-minionSUSECVE-2025-22239 salt advisory8.1 Highvenv-salt-minionSUSECVE-2025-22238 salt advisory4.2 Mediumvenv-salt-minionSUSECVE-2025-22237 salt advisory6.7 Mediumvenv-salt-minionSUSECVE-2025-22236 salt advisory8.1 Highvenv-salt-minionSUSECVE-2024-38825 Salt Advisory6.4 Mediumvenv-salt-minionSUSECVE-2024-38823 Salt Advisory2.7 Lowvenv-salt-minionSUSECVE-2024-38822 Salt Advisory2.7 Lowvenv-salt-minionSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumvenv-salt-minionSUSETornado vulnerable to excessive logging caused by malformed multipart form data7.5 Highvenv-salt-minionSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumvenv-salt-minionSUSEInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highvenv-salt-minionSUSEQuadratic complexity parsing cookies with backslashes7.5 Highvenv-salt-minionSUSEEmail header injection due to unquoted newlines5.5 Mediumvenv-salt-minionSUSERemote Code Execution in pypa/setuptools8.8 Highvenv-salt-minionSUSEDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumvenv-salt-minionSUSEProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumvenv-salt-minionSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highvenv-salt-minionSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highvenv-salt-minionSUSEDenial of Service via Quadratic Complexity in kjd/idna6.2 Mediumvenv-salt-minionSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highvenv-salt-minionSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumvenv-salt-minionSUSESpecially crafted url can be created which leads to a directory traversal in the salt file server7.7 Highvenv-salt-minionSUSESyndic cache directory creation is vulnerable to a directory traversal attack5.0 Mediumvenv-salt-minionSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumvenv-salt-minionSUSESalt security advisory release - 2023-OCT-276.7 Mediumvenv-salt-minionSUSESalt can cause Git Providers to get wrong data4.2 Mediumvenv-salt-minionSUSESalt vulnerable to denial of service5.3 Mediumvenv-salt-minionSUSEOpen redirect in Tornado6.1 Mediumvenv-salt-minionSUSESalt's PAM auth fails to reject locked accounts8.8 High- Show moreLoading…