salt vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-12791Criticalsalt: SaltStack Salt Directory traversal vulnerability in minion id validation CVE-2017-5192Highsalt: SaltStack Salt Authentication Bypass when using the local_batch client from salt-api CVE-2015-6918Mediumsalt: salt leaks git usernames and passwords to the log CVE-2017-14695Criticalsalt: SaltStack Salt Directory traversal vulnerability in minion id validation CVE-2017-14696Highsalt: SaltStack Salt Denial of Service via a crafted authentication request CVE-2015-4017Highsalt: Salt vulnerable to Improper Certificate Validation CVE-2016-1866Highsalt: Salt Improper Access Control CVE-2017-7893Criticalsalt: SaltStack Salt allows compromised salt-minions to impersonate the salt-master CVE-2017-5200Highsalt: SaltStack Salt arbitrary command execution in Salt-api via ssh_client CVE-2018-15751Criticalsalt: SaltStack Salt Remote command execution and incorrect access control when using salt-api CVE-2018-15750Mediumsalt: SaltStack Salt Directory Traversal vulnerability in salt-api CVE-2013-2228Highsalt: SaltStack RSA Key Generation allows remote users to decrypt communications CVE-2022-22941Highsalt: SaltStack Salt Permissions Bypass CVE-2022-22935Lowsalt: SaltStack Salt Improper Authentication via Man in the Middle Attack CVE-2022-22934Highsalt: SaltStack Improper Verification of Cryptographic Signature CVE-2022-22936Highsalt: SaltStack Salt Authentication Bypass by Capture-replay CVE-2021-21996Highsalt: Exposure of Resource to Wrong Sphere in salt

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo