Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi salt Security Advisories

Loading...
Moderate
GSA_kwCzR0hTQS1xdmg2LTNqN3gtM2hxN84AA1sa
Salt can cause Git Providers to get wrong data
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 11.1
Published: 8 months ago
Moderate
GSA_kwCzR0hTQS12cGpnLXdtZjgtMjloOc4AA1sb
Salt vulnerable to denial of service
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: 8 months ago
High
GSA_kwCzR0hTQS1mcHhtLWZwcnctNmh4as4AAs_R
Salt's PAM auth fails to reject locked accounts
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS14ZjM3LXFjdmYtN201N84AAp0a
Improper Authentication in SaltStack Salt
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 16.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1oY2pmLXJwNWgtZzVoM84AAoPm
Command Injection in SaltStack Salt
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 20.5
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1wbWo2LTlmOGMtOGcybc4AAnt9
Saltstack Salt Unauthenticated Arbitrary Code Execution
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 20.5
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS04cnA2LXgzcjctNXF3M84AAnsd
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS13MmhyLTNtYzgtNDZnaM4AAnse
SaltStack Salt eauth tokens can be used once after expiration
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.9
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1naGMyLWh4M3ctanFtcM4AAnsb
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS03Nng0LXgzcDYtcnByOc4AAnsY
SaltStack Salt Directory Traversal vulnerability
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1yNTV3LXhwaDUteHZ4Ms4AAnsZ
SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 11.6
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS14Z21oLWdmeHctMmh2ds4AAnsM
SaltStack Salt Server Side Template Injection
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS14eHczLTc2NW0tZjM3cM4AAnsH
SaltStack Salt Improper Authentication vulnerability
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1xeDcyLXE2dzMtcWdjN84AAnsJ
SaltStack Salt Improper SSL Certificate Validation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 19.5
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1waGh3LTN3YzktOHE3Nc4AAnsW
SaltStack Salt command injection via a crafted process name
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 20.5
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS13NTg5LXIzMzUtNGY1Nc4AAnsP
SaltStack Salt Improper Certificate Validation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 15.5
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1xcjM4LWg5NmotMmozd84AAmhh
SaltStack Salt Command Injection in netapi ssh client
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS0yOWozLTI0NDYtNWo0d84AAmhY
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS0zYzU2LXZ4NnYtcTV2aM4AAmhj
SaltStack Salt Allows creating certificates with weak file permissions
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 14.5
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1wamhmLXZweDMtMzNyM84AAklg
SaltStack Salt Unauthenticated Remote Code Execution
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS12cDQ5LTJnNHItbTN4M84AAklX
SaltStack Salt is vulnerable Arbitrary Directory Access
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 17.1
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1xNTNqLXA2cjItZzJ2NM4AAjV1
SaltStack Salt is vulnerable to command injection
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1oOHhwLWgzamYtd3Y0ds4AAhVu
SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS03d3gzLXZyMmYtNnAyOc4AAe6H
SaltStack Privilege Escalation vulnerability
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1qbXY5LTVneDgtN3hwZs4AAe6X
Minion identity not validated in saltstack
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1mMjJqLTM3amotY3h3Oc4AAe6U
SaltStack MITM SSH attack in salt-ssh
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS12ODlmLTRtYzQtaDZ3Oc4AAe54
Salt has insufficient argument validation in several modules
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS12MnJwLTljcGotcGZ3Ms4AAcAp
Salt Insecure configuration of PAM external authentication service
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 14.7
Published: almost 2 years ago
Low
GSA_kwCzR0hTQS02cHJ3LTh4aG0taDI0N84AAb59
Salt uses weak permissions on the cache data
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 8.7
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS02Z3JwLTc1cHEtYzhjas4AAbtM
SaltStack has insecure /tmp file handling in salt/modules/chef.py
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS05MnB3LW1mZjktanFnbc4AAbtJ
Salt improper handling of tmp files
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS14Y3g0LTV3cTctZzVnN84AAbpc
SaltStack Salt Information Exposure
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 20.5
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1jeG00LTdxY3ctMjY3cs4AAadQ
salt password information leaked in debug logs
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1tZnIzLTljajgtaDJxbc4AAZnm
SaltStack Salt Insecure Temporary File Creation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS14eHZqLThnNW0tNHFnd84AAZkW
SaltStack Salt Directory traversal vulnerability in minion id validation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1mMmg3LTRmODQtOHFybc4AAYb8
SaltStack Salt Authentication Bypass when using the local_batch client from salt-api
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.2
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1xMng2LThnZmotaGp4d84AAYQJ
salt leaks git usernames and passwords to the log
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 16.6
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1qNmdqLXBnNjIteDhqNs4AAYNc
SaltStack Salt Directory traversal vulnerability in minion id validation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS02NTdwLWNqNXItbWpyaM4AAYMj
SaltStack Salt Denial of Service via a crafted authentication request
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: almost 2 years ago
High
GSA_kwCzR0hTQS04ajlnLWM5cnAtanZnNM4AAWfQ
Salt vulnerable to Improper Certificate Validation
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: almost 2 years ago
High
GSA_kwCzR0hTQS12cWg0LWNyamYtamp4eM4AAVIw
Salt Improper Access Control
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 21.3
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1nMjgzLTg4djUtcm1xMs4AASb0
SaltStack Salt allows compromised salt-minions to impersonate the salt-master
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
High
GSA_kwCzR0hTQS04cjdyLXg0OHItcGY4Zs4AASVW
SaltStack Salt arbitrary command execution in Salt-api via ssh_client
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.2
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS14NTQ5LXI3bTgtZ3Y2M84AAQNo
SaltStack Salt Remote command execution and incorrect access control when using salt-api
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 25.8
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1qeDM0LXBwcG0tZ2p2cs4AAQNk
SaltStack Salt Directory Traversal vulnerability in salt-api
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1ncTI2LWNwcTYtdzg1cs3gWg
SaltStack RSA Key Generation allows remote users to decrypt communications
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 21.3
Published: about 2 years ago
High
GSA_kwCzR0hTQS0ycTRnLXdmbTYtNWZwbc02rA
SaltStack Improper Verification of Cryptographic Signature
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.2
Published: about 2 years ago
High
GSA_kwCzR0hTQS01cjNmLTNtM2otd2NqMs02qA
SaltStack Salt Authentication Bypass by Capture-replay
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.2
Published: about 2 years ago
Low
GSA_kwCzR0hTQS1jdmNjLTV4OTItZ21oY802tg
SaltStack Salt Improper Authentication via Man in the Middle Attack
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 9.7
Published: about 2 years ago
High
GSA_kwCzR0hTQS1xY3IzLWhyMmYtNjU1N802vw
SaltStack Salt Permissions Bypass
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 23.2
Published: about 2 years ago
High
GSA_kwCzR0hTQS1wZjdoLWgyd3EtbTdwZ80XuQ
Exposure of Resource to Wrong Sphere in salt
Ecosystems: pypi
Packages: salt
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: over 2 years ago
Statistics
Advisories: 18,409
Packages: 8,306
Repositories: 4
Ecosystems: 12
Filter by Severity
Moderate 7,953 High 6,368 Critical 2,811 Low 986
Filter by Ecosystem
maven 5,536 packagist 3,815 pypi 3,730 npm 3,547 go 1,900 nuget 1,390 rubygems 814 cargo 779 swift 31 hex 30 actions 16 pub 8
Filter by Package
tensorflow 432 tensorflow-cpu 387 tensorflow-gpu 384 django 80 apache-airflow 78 ansible 63 salt 51 apache-superset 49 Plone 45 plone 43 rdiffweb 42 Pillow 41 vyper 38 matrix-synapse 35 mlflow 31 opencv-contrib-python 30 opencv-python 30 Django 28 moin 23 langchain 18 PaddlePaddle 17 mercurial 17 cobbler 17 nova 16 pillow 16 gradio 15 paddlepaddle 15 cryptography 15 notebook 15 modoboa 14 pyftpdlib 14 keystone 14 pyload-ng 14 neutron 13 OctoPrint 12 vantage6 12 glance 11 urllib3 11 calibreweb 11 twisted 11 onionshare-cli 11 aiohttp 11 wagtail 10 Flask-AppBuilder 10 trytond 10 zope 9 opencv-contrib-python-headless 9 opencv-python-headless 9 Zope 9 ryu 9 waitress 9 kiwitcms 9 ethyca-fides 9 roundup 8 trac 8 numpy 8 nautobot 8 python-keystoneclient 8 label-studio 8 aubio 8 jupyter-server 7 swift 7 scrapy 7 matrix-sydent 7 pysaml2 7 ipython 7 pgadmin4 7 lief 7 pip 7 apache-airflow-providers-apache-hive 6 graphite-web 6 horizon 6 lxml 6 tuf 6 sentry 6 mindsdb 6 web2py 6 mailman 6 Zope2 6 inventree 6 lmdb 5 python-gnupg 5 feedparser 5 Jinja2 5 paramiko 5 whoogle-search 5 requests 5 Products.CMFPlone 5 ckan 5 bleach 5 cinder 5 pyspark 5 saleor 5 httpie 4 grpc 4 grpcio 4 oauthenticator 4 tornado 4 keylime 4 nvflare 4 PyPDF2 4 starlette 4 FreeTAKServer-UI 4 ansible-core 4 datasette 4 transformers 4 markdown2 4 reportlab 4 qutebrowser 4 nltk 4 yt-dlp 4 Pygments 4 jupyterhub 4 werkzeug 4 buildbot 4 Flask-Security-Too 4 omero-web 4 Werkzeug 4 esphome 4 GitPython 4 bottle 4 tripleo-heat-templates 4 Radicale 4 awsiotsdk 4 jwcrypto 4 pretix 4 aws-iot-device-sdk-v2 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 sosreport 3 bitlyshortener 3 localstack 3 indico 3 Moin 3 poetry 3 pywasm3 3 sickrage 3 onnx 3 gerapy 3 plone.supermodel 3 protobuf 3 plone.app.dexterity 3 plone.app.theming 3 plone.app.event 3 httplib2 3 apache-libcloud 3 ray 3 django-helpdesk 3 ecdsa 3 zenml 3 asyncssh 3 ajenti 3 barbican 3 pyarrow 3 python-jose 3 changedetection.io 3 fava 3 sanic 3 rsa 3 Products.PluggableAuthService 3 sqlparse 3 apache-iotdb 3 asyncua 3 wger 3 keyring 3 Mezzanine 3 jupyterlab 3 flask 3 dulwich 3 pycrypto 3 homeassistant 3 aim 3 indy-node 3 octavia 3 mistune 3 slixmpp 3 apache-airflow-providers-apache-spark 3 ujson 3 copyparty 3 streamlit 3 clearml 3 torchserve 3 docassemble.webapp 3 Weblate 3 pyyaml 3 SQLAlchemy 3 quokka 3 openvpn-monitor 3 Keystone 3 mayan-edms 3 pandasai 3 ansible-runner 3 mitmproxy 3 io.grpc:grpc-protobuf 3 zope2 2 djblets 2 ubi-reader 2 wagtail-2fa 2 Products.CMFCore 2 jinja2 2 untangle 2
Filter by Repository
https://github.com/saltstack/salt 32 https://github.com/twangboy/salt 1 https://github.com/stealthcopter/CVE-2020-28243 1