salt vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-62349Highsalt: Salt Authentication Protocol Version Downgrade Allows Minion Impersonation CVE-2025-62348Highsalt: Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload CVE-2024-38824Criticalsalt: Salt vulnerable to directory traversal attack in file receiving method CVE-2025-22242Mediumsalt: Salt's worker process vulnerable to denial of service through file read operation CVE-2025-22238Mediumsalt: Salt vulnerable to directory traversal attack in minion file cache creation CVE-2025-22237Mediumsalt: Salt's on demand pillar functionality vulnerable to arbitrary command injections CVE-2025-22241Mediumsalt: Salt's file contents overwrite the VirtKey class CVE-2025-22240Mediumsalt: Salt allows arbitrary directory creation or file deletion CVE-2025-22239Highsalt: Salt vulnerable to arbitrary event injection CVE-2024-38825Mediumsalt: Salt's salt.auth.pki module does not properly authenticate callers CVE-2025-22236Highsalt: Salt has minion event bus authorization bypass vulnerability CVE-2023-34049Mediumsalt: Salt preflight script could be attacker controlled CVE-2024-22232Highsalt: Path traversal in saltstack CVE-2024-22231Mediumsalt: Directory creation by malicious user in saltstack CVE-2023-20897Mediumsalt: Salt vulnerable to denial of service CVE-2023-20898Mediumsalt: Salt can cause Git Providers to get wrong data CVE-2022-22967Highsalt: Salt's PAM auth fails to reject locked accounts CVE-2021-22004Highsalt: Improper Authentication in SaltStack Salt CVE-2021-31607Highsalt: Command Injection in SaltStack Salt CVE-2021-25315Highsalt: Saltstack Salt Unauthenticated Arbitrary Code Execution CVE-2021-3144Criticalsalt: SaltStack Salt eauth tokens can be used once after expiration CVE-2021-3197Criticalsalt: SaltStack Salt is vulnerable to shell injection via ProxyCommand argument CVE-2021-3148Criticalsalt: SaltStack Salt command injection in the Salt-API when using the Salt-SSH client CVE-2021-25284Mediumsalt: SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod CVE-2021-25282Highsalt: SaltStack Salt Directory Traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.