Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/62737?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "type": "pypi", "namespace": "", "name": "salt", "version": "3000.6", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3006.17", "latest_non_vulnerable_version": "3007.9", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15548?format=api", "vulnerability_id": "VCID-1qwk-r5xw-rubd", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-34049", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18966", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.1915", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.19131", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-34049" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444" }, { "reference_url": "https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34049", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34049" }, { "reference_url": "https://saltproject.io/security-announcements/2023-10-27-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2023-10-27-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2023-10-27-advisory/", "reference_id": "2023-10-27-advisory", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-14T15:12:53Z/" } ], "url": "https://saltproject.io/security-announcements/2023-10-27-advisory/" }, { "reference_url": "https://github.com/advisories/GHSA-4277-m35q-7c9w", "reference_id": "GHSA-4277-m35q-7c9w", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-4277-m35q-7c9w" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372807?format=api", "purl": "pkg:pypi/salt@3005.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/372808?format=api", "purl": "pkg:pypi/salt@3006.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5hfq-mxpt-sbf6" }, { "vulnerability": "VCID-93ut-ytnv-4bdn" }, { "vulnerability": "VCID-agac-8rw7-6yhm" }, { "vulnerability": "VCID-ck3n-zy66-f7cb" }, { "vulnerability": "VCID-dw95-xump-ckdr" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-mf19-64b3-xyfu" }, { "vulnerability": "VCID-q74w-m5xw-3kc2" }, { "vulnerability": "VCID-uatn-uzmu-8kf9" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vz3b-z5cf-a3es" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.4" } ], "aliases": [ "CVE-2023-34049", "GHSA-4277-m35q-7c9w" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1qwk-r5xw-rubd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9049?format=api", "vulnerability_id": "VCID-3q7a-nzue-5ken", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21996", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02263", "scoring_system": "epss", "scoring_elements": "0.8504", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.02263", "scoring_system": "epss", "scoring_elements": "0.85049", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.02263", "scoring_system": "epss", "scoring_elements": "0.84988", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21996" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21996", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21996" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041838", "reference_id": "2041838", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041838" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21996", "reference_id": "CVE-2021-21996", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21996" }, { "reference_url": "https://github.com/advisories/GHSA-pf7h-h2wq-m7pg", "reference_id": "GHSA-pf7h-h2wq-m7pg", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pf7h-h2wq-m7pg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18083?format=api", "purl": "pkg:pypi/salt@3003.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3" } ], "aliases": [ "CVE-2021-21996", "GHSA-pf7h-h2wq-m7pg", "PYSEC-2021-318" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3q7a-nzue-5ken" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11464?format=api", "vulnerability_id": "VCID-47fc-3b14-4uha", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22935", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21751", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21764", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21564", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22935" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22935", "reference_id": "CVE-2022-22935", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22935" }, { "reference_url": "https://github.com/advisories/GHSA-cvcc-5x92-gmhc", "reference_id": "GHSA-cvcc-5x92-gmhc", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cvcc-5x92-gmhc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19914?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/19916?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/19913?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22935", "GHSA-cvcc-5x92-gmhc", "PYSEC-2022-172" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-47fc-3b14-4uha" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15047?format=api", "vulnerability_id": "VCID-785e-fxwd-s7bz", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20897", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.38844", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.39039", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.39016", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20897" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-vpjg-wmf8-29h9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vpjg-wmf8-29h9" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20897", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20897" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory/", "reference_id": "2023-08-10-advisory", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T17:24:32Z/" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory/" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/", "reference_id": "OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T17:24:32Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/78015?format=api", "purl": "pkg:pypi/salt@3005.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/78014?format=api", "purl": "pkg:pypi/salt@3006.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-5hfq-mxpt-sbf6" }, { "vulnerability": "VCID-93ut-ytnv-4bdn" }, { "vulnerability": "VCID-agac-8rw7-6yhm" }, { "vulnerability": "VCID-ck3n-zy66-f7cb" }, { "vulnerability": "VCID-dw95-xump-ckdr" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-mf19-64b3-xyfu" }, { "vulnerability": "VCID-q74w-m5xw-3kc2" }, { "vulnerability": "VCID-uatn-uzmu-8kf9" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vz3b-z5cf-a3es" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2" } ], "aliases": [ "CVE-2023-20897", "GHSA-vpjg-wmf8-29h9", "PYSEC-2023-166" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-785e-fxwd-s7bz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/210540?format=api", "vulnerability_id": "VCID-894v-eb8v-p3dk", "summary": "Improper Authentication in SaltStack Salt", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-22004", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.3391", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.34111", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.34086", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-22004" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041836", "reference_id": "2041836", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041836" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22004", "reference_id": "CVE-2021-22004", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22004" }, { "reference_url": "https://github.com/advisories/GHSA-xf37-qcvf-7m57", "reference_id": "GHSA-xf37-qcvf-7m57", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xf37-qcvf-7m57" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/18083?format=api", "purl": "pkg:pypi/salt@3003.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3" } ], "aliases": [ "CVE-2021-22004", "GHSA-xf37-qcvf-7m57", "PYSEC-2021-346" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-894v-eb8v-p3dk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8468?format=api", "vulnerability_id": "VCID-8az5-5kg7-yfb2", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.74614", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.746", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.74528", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347", "reference_id": "1933347", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972", "reference_id": "CVE-2020-28972", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972" }, { "reference_url": "https://github.com/advisories/GHSA-w589-r335-4f55", "reference_id": "GHSA-w589-r335-4f55", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w589-r335-4f55" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28972", "GHSA-w589-r335-4f55", "PYSEC-2021-74" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8az5-5kg7-yfb2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9581?format=api", "vulnerability_id": "VCID-axae-4zgs-9bfb", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33226", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04007", "scoring_system": "epss", "scoring_elements": "0.887", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.04007", "scoring_system": "epss", "scoring_elements": "0.88745", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.04007", "scoring_system": "epss", "scoring_elements": "0.88738", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33226" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33226", "reference_id": "CVE-2021-33226", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33226" }, { "reference_url": "https://bugzilla.suse.com/show_bug.cgi?id=1208473", "reference_id": "show_bug.cgi?id=1208473", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-18T19:05:32Z/" } ], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1208473" }, { "reference_url": "https://github.com/saltstack/salt/blob/master/salt/modules/status.py", "reference_id": "status.py", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track*", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-18T19:05:32Z/" } ], "url": "https://github.com/saltstack/salt/blob/master/salt/modules/status.py" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/66125?format=api", "purl": "pkg:pypi/salt@3003.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.1" } ], "aliases": [ "CVE-2021-33226", "PYSEC-2023-47" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-axae-4zgs-9bfb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9505?format=api", "vulnerability_id": "VCID-b2df-ykkt-dud1", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93191", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93215", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93214", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323", "reference_id": "1933323", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197", "reference_id": "CVE-2021-3197", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197" }, { "reference_url": "https://github.com/advisories/GHSA-8rp6-x3r7-5qw3", "reference_id": "GHSA-8rp6-x3r7-5qw3", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8rp6-x3r7-5qw3" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3197", "GHSA-8rp6-x3r7-5qw3", "PYSEC-2021-57" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b2df-ykkt-dud1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11466?format=api", "vulnerability_id": "VCID-bpp3-fcyq-2uaq", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22941", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03592", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03599", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03607", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22941" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22941", "reference_id": "CVE-2022-22941", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22941" }, { "reference_url": "https://github.com/advisories/GHSA-qcr3-hr2f-6557", "reference_id": "GHSA-qcr3-hr2f-6557", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qcr3-hr2f-6557" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19914?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/19916?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/19913?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22941", "GHSA-qcr3-hr2f-6557", "PYSEC-2022-174" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bpp3-fcyq-2uaq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9184?format=api", "vulnerability_id": "VCID-cs4q-qbrx-jfbd", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05843", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05852", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05825", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339", "reference_id": "1933339", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284", "reference_id": "CVE-2021-25284", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284" }, { "reference_url": "https://github.com/advisories/GHSA-r55w-xph5-xvx2", "reference_id": "GHSA-r55w-xph5-xvx2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r55w-xph5-xvx2" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25284", "GHSA-r55w-xph5-xvx2", "PYSEC-2021-53" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cs4q-qbrx-jfbd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9182?format=api", "vulnerability_id": "VCID-f4qt-s9m9-rbf3", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99672", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99674", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99673", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327", "reference_id": "1933327", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282", "reference_id": "CVE-2021-25282", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282" }, { "reference_url": "https://github.com/advisories/GHSA-76x4-x3p6-rpr9", "reference_id": "GHSA-76x4-x3p6-rpr9", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-76x4-x3p6-rpr9" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25282", "GHSA-76x4-x3p6-rpr9", "PYSEC-2021-51" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f4qt-s9m9-rbf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9194?format=api", "vulnerability_id": "VCID-fauf-vjt1-7bgu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25315", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.35992", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.35969", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.35789", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25315" }, { "reference_url": "https://bugzilla.suse.com/show_bug.cgi?id=1182382", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1182382" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945077", "reference_id": "1945077", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945077" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25315", "reference_id": "CVE-2021-25315", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25315" }, { "reference_url": "https://github.com/advisories/GHSA-pmj6-9f8c-8g2m", "reference_id": "GHSA-pmj6-9f8c-8g2m", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pmj6-9f8c-8g2m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23147?format=api", "purl": "pkg:pypi/salt@3002.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.2" } ], "aliases": [ "CVE-2021-25315", "GHSA-pmj6-9f8c-8g2m", "PYSEC-2021-891" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fauf-vjt1-7bgu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11468?format=api", "vulnerability_id": "VCID-gtes-baaj-7beu", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22967", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66618", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66724", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66711", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22967" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "202310-22", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/%2C", "reference_id": "%2C", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/%2C" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22967", "reference_id": "CVE-2022-22967", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22967" }, { "reference_url": "https://github.com/advisories/GHSA-fpxm-fprw-6hxj", "reference_id": "GHSA-fpxm-fprw-6hxj", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fpxm-fprw-6hxj" }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "repo.saltproject.io", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/" } ], "url": "https://repo.saltproject.io/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25061?format=api", "purl": "pkg:pypi/salt@3002.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/25057?format=api", "purl": "pkg:pypi/salt@3003.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/25060?format=api", "purl": "pkg:pypi/salt@3004.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.2" } ], "aliases": [ "CVE-2022-22967", "GHSA-fpxm-fprw-6hxj", "PYSEC-2022-210" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gtes-baaj-7beu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15048?format=api", "vulnerability_id": "VCID-h7qv-ty6k-rkfg", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28971", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.29194", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.29175", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20898" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-qvh6-3j7x-3hq7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qvh6-3j7x-3hq7" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20898", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20898" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory/", "reference_id": "2023-08-10-advisory", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:44:22Z/" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory/" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/", "reference_id": "OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:44:22Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/78015?format=api", "purl": "pkg:pypi/salt@3005.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/78014?format=api", "purl": "pkg:pypi/salt@3006.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-5hfq-mxpt-sbf6" }, { "vulnerability": "VCID-93ut-ytnv-4bdn" }, { "vulnerability": "VCID-agac-8rw7-6yhm" }, { "vulnerability": "VCID-ck3n-zy66-f7cb" }, { "vulnerability": "VCID-dw95-xump-ckdr" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-mf19-64b3-xyfu" }, { "vulnerability": "VCID-q74w-m5xw-3kc2" }, { "vulnerability": "VCID-uatn-uzmu-8kf9" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vz3b-z5cf-a3es" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2" } ], "aliases": [ "CVE-2023-20898", "GHSA-qvh6-3j7x-3hq7", "PYSEC-2023-169" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h7qv-ty6k-rkfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9485?format=api", "vulnerability_id": "VCID-he35-2eaz-qkdq", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31607.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31607.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-31607", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04548", "scoring_system": "epss", "scoring_elements": "0.89463", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.04548", "scoring_system": "epss", "scoring_elements": "0.89471", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.04548", "scoring_system": "epss", "scoring_elements": "0.89427", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-31607" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-56.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-56.yaml" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion" }, { "reference_url": "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1953065", "reference_id": "1953065", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1953065" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31607", "reference_id": "CVE-2021-31607", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31607" }, { "reference_url": "https://github.com/advisories/GHSA-hcjf-rp5h-g5h3", "reference_id": "GHSA-hcjf-rp5h-g5h3", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hcjf-rp5h-g5h3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23314?format=api", "purl": "pkg:pypi/salt@3003rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003rc1" } ], "aliases": [ "CVE-2021-31607", "GHSA-hcjf-rp5h-g5h3", "PYSEC-2021-56" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-he35-2eaz-qkdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18228?format=api", "vulnerability_id": "VCID-jnqb-7xsu-cyhp", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-22232", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00439", "scoring_system": "epss", "scoring_elements": "0.63582", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00439", "scoring_system": "epss", "scoring_elements": "0.63698", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00439", "scoring_system": "epss", "scoring_elements": "0.63684", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-22232" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab" }, { "reference_url": "https://saltproject.io/security-announcements/2024-01-31-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2024-01-31-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2024-01-31-advisory/", "reference_id": "2024-01-31-advisory", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-27T14:41:55Z/" } ], "url": "https://saltproject.io/security-announcements/2024-01-31-advisory/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22232", "reference_id": "CVE-2024-22232", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22232" }, { "reference_url": "https://github.com/advisories/GHSA-2qw3-2wv6-p64x", "reference_id": "GHSA-2qw3-2wv6-p64x", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2qw3-2wv6-p64x" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32314?format=api", "purl": "pkg:pypi/salt@3005.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32313?format=api", "purl": "pkg:pypi/salt@3006.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5hfq-mxpt-sbf6" }, { "vulnerability": "VCID-93ut-ytnv-4bdn" }, { "vulnerability": "VCID-agac-8rw7-6yhm" }, { "vulnerability": "VCID-ck3n-zy66-f7cb" }, { "vulnerability": "VCID-dw95-xump-ckdr" }, { "vulnerability": "VCID-mf19-64b3-xyfu" }, { "vulnerability": "VCID-q74w-m5xw-3kc2" }, { "vulnerability": "VCID-uatn-uzmu-8kf9" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vz3b-z5cf-a3es" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6" } ], "aliases": [ "CVE-2024-22232", "GHSA-2qw3-2wv6-p64x" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jnqb-7xsu-cyhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9477?format=api", "vulnerability_id": "VCID-kxut-sccv-g7hu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.9191", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.91918", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.91882", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336", "reference_id": "1933336", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148", "reference_id": "CVE-2021-3148", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148" }, { "reference_url": "https://github.com/advisories/GHSA-ghc2-hx3w-jqmp", "reference_id": "GHSA-ghc2-hx3w-jqmp", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ghc2-hx3w-jqmp" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3148", "GHSA-ghc2-hx3w-jqmp", "PYSEC-2021-55" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kxut-sccv-g7hu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9183?format=api", "vulnerability_id": "VCID-p435-eq6q-6udb", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93257", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93255", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93234", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331", "reference_id": "1933331", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283", "reference_id": "CVE-2021-25283", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283" }, { "reference_url": "https://github.com/advisories/GHSA-xgmh-gfxw-2hvv", "reference_id": "GHSA-xgmh-gfxw-2hvv", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xgmh-gfxw-2hvv" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25283", "GHSA-xgmh-gfxw-2hvv", "PYSEC-2021-52" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p435-eq6q-6udb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9475?format=api", "vulnerability_id": "VCID-phas-8df3-mfez", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90454", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90416", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90446", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344", "reference_id": "1933344", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144", "reference_id": "CVE-2021-3144", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144" }, { "reference_url": "https://github.com/advisories/GHSA-w2hr-3mc8-46gh", "reference_id": "GHSA-w2hr-3mc8-46gh", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w2hr-3mc8-46gh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3144", "GHSA-w2hr-3mc8-46gh", "PYSEC-2021-54" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-phas-8df3-mfez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11463?format=api", "vulnerability_id": "VCID-t5b4-31st-b7er", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22934", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30793", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30577", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30773", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22934" }, { "reference_url": "https://blog.cloudflare.com/future-proofing-saltstack", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://blog.cloudflare.com/future-proofing-saltstack" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22934", "reference_id": "CVE-2022-22934", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22934" }, { "reference_url": "https://github.com/advisories/GHSA-2q4g-wfm6-5fpm", "reference_id": "GHSA-2q4g-wfm6-5fpm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2q4g-wfm6-5fpm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19914?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/19916?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/19913?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22934", "GHSA-2q4g-wfm6-5fpm", "PYSEC-2022-171" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t5b4-31st-b7er" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18227?format=api", "vulnerability_id": "VCID-ve75-ee6s-huhq", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-22231", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0058", "scoring_system": "epss", "scoring_elements": "0.69363", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0058", "scoring_system": "epss", "scoring_elements": "0.69468", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0058", "scoring_system": "epss", "scoring_elements": "0.69455", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-22231" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab" }, { "reference_url": "https://saltproject.io/security-announcements/2024-01-31-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2024-01-31-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2024-01-31-advisory/", "reference_id": "2024-01-31-advisory", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-08T14:45:17Z/" } ], "url": "https://saltproject.io/security-announcements/2024-01-31-advisory/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22231", "reference_id": "CVE-2024-22231", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22231" }, { "reference_url": "https://github.com/advisories/GHSA-q27c-j6j9-53w3", "reference_id": "GHSA-q27c-j6j9-53w3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q27c-j6j9-53w3" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32314?format=api", "purl": "pkg:pypi/salt@3005.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32313?format=api", "purl": "pkg:pypi/salt@3006.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5hfq-mxpt-sbf6" }, { "vulnerability": "VCID-93ut-ytnv-4bdn" }, { "vulnerability": "VCID-agac-8rw7-6yhm" }, { "vulnerability": "VCID-ck3n-zy66-f7cb" }, { "vulnerability": "VCID-dw95-xump-ckdr" }, { "vulnerability": "VCID-mf19-64b3-xyfu" }, { "vulnerability": "VCID-q74w-m5xw-3kc2" }, { "vulnerability": "VCID-uatn-uzmu-8kf9" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vz3b-z5cf-a3es" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6" } ], "aliases": [ "CVE-2024-22231", "GHSA-q27c-j6j9-53w3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ve75-ee6s-huhq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/25803?format=api", "vulnerability_id": "VCID-vfyt-s2em-8kd4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62348", "reference_id": "", "reference_type": "", "scores": [ { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00645", "published_at": "2026-06-13T12:55:00Z" }, { "value": "7e-05", "scoring_system": "epss", "scoring_elements": "0.00646", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62348" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/issues/68469", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/issues/68469" }, { "reference_url": "https://github.com/saltstack/salt/pull/68472/commits/c17fd645edef208233dcac855615fced69409a00", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/pull/68472/commits/c17fd645edef208233dcac855615fced69409a00" }, { "reference_url": "https://docs.saltproject.io/en/latest/topics/releases/3006.17.html", "reference_id": "3006.17.html", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-30T19:30:12Z/" } ], "url": "https://docs.saltproject.io/en/latest/topics/releases/3006.17.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62348", "reference_id": "CVE-2025-62348", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62348" }, { "reference_url": "https://github.com/advisories/GHSA-77w2-v593-vxvv", "reference_id": "GHSA-77w2-v593-vxvv", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-77w2-v593-vxvv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38467?format=api", "purl": "pkg:pypi/salt@3006.17", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.17" } ], "aliases": [ "CVE-2025-62348", "GHSA-77w2-v593-vxvv" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vfyt-s2em-8kd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9181?format=api", "vulnerability_id": "VCID-wk15-cb1u-eqdq", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93846", "scoring_system": "epss", "scoring_elements": "0.99875", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.93846", "scoring_system": "epss", "scoring_elements": "0.99876", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325", "reference_id": "1933325", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "202103-01", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "202310-22", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/", "reference_id": "active-saltstack-cve-announced-2021-jan-21", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "active-saltstack-cve-release-2021-feb-25", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281", "reference_id": "CVE-2021-25281", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "dsa-5011", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://github.com/advisories/GHSA-xxw3-765m-f37p", "reference_id": "GHSA-xxw3-765m-f37p", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xxw3-765m-f37p" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "msg00009.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "releases", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_id": "SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25281", "GHSA-xxw3-765m-f37p", "PYSEC-2021-50" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wk15-cb1u-eqdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8445?format=api", "vulnerability_id": "VCID-xfxm-a3ku-a7h4", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80974", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80905", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80964", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://sec.stealthcopter.com/cve-2020-28243/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350", "reference_id": "1933350", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350" }, { "reference_url": "https://github.com/stealthcopter/CVE-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/stealthcopter/CVE-2020-28243" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://sec.stealthcopter.com/cve-2020-28243" }, { "reference_url": "https://github.com/advisories/GHSA-phhw-3wc9-8q75", "reference_id": "GHSA-phhw-3wc9-8q75", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-phhw-3wc9-8q75" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28243", "GHSA-phhw-3wc9-8q75", "PYSEC-2021-73" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xfxm-a3ku-a7h4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11465?format=api", "vulnerability_id": "VCID-z6cg-d8vs-tybn", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22936", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28714", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28739", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28518", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22936" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22936", "reference_id": "CVE-2022-22936", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22936" }, { "reference_url": "https://github.com/advisories/GHSA-5r3f-3m3j-wcj2", "reference_id": "GHSA-5r3f-3m3j-wcj2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5r3f-3m3j-wcj2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/19914?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/19916?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/19913?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22936", "GHSA-5r3f-3m3j-wcj2", "PYSEC-2022-173" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z6cg-d8vs-tybn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8567?format=api", "vulnerability_id": "VCID-z8vc-drx3-h3an", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73683", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73668", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73593", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342", "reference_id": "1933342", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "202103-01", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "202310-22", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "active-saltstack-cve-release-2021-feb-25", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662", "reference_id": "CVE-2020-35662", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "dsa-5011", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://github.com/advisories/GHSA-qx72-q6w3-qgc7", "reference_id": "GHSA-qx72-q6w3-qgc7", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qx72-q6w3-qgc7" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "msg00009.html", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-35662", "GHSA-qx72-q6w3-qgc7", "PYSEC-2021-75" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z8vc-drx3-h3an" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8468?format=api", "vulnerability_id": "VCID-8az5-5kg7-yfb2", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.74614", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.746", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.74528", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347", "reference_id": "1933347", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972", "reference_id": "CVE-2020-28972", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972" }, { "reference_url": "https://github.com/advisories/GHSA-w589-r335-4f55", "reference_id": "GHSA-w589-r335-4f55", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w589-r335-4f55" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28972", "GHSA-w589-r335-4f55", "PYSEC-2021-74" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8az5-5kg7-yfb2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9505?format=api", "vulnerability_id": "VCID-b2df-ykkt-dud1", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93191", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93215", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93214", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323", "reference_id": "1933323", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197", "reference_id": "CVE-2021-3197", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197" }, { "reference_url": "https://github.com/advisories/GHSA-8rp6-x3r7-5qw3", "reference_id": "GHSA-8rp6-x3r7-5qw3", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8rp6-x3r7-5qw3" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3197", "GHSA-8rp6-x3r7-5qw3", "PYSEC-2021-57" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b2df-ykkt-dud1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9184?format=api", "vulnerability_id": "VCID-cs4q-qbrx-jfbd", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05843", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05852", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05825", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339", "reference_id": "1933339", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284", "reference_id": "CVE-2021-25284", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284" }, { "reference_url": "https://github.com/advisories/GHSA-r55w-xph5-xvx2", "reference_id": "GHSA-r55w-xph5-xvx2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r55w-xph5-xvx2" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25284", "GHSA-r55w-xph5-xvx2", "PYSEC-2021-53" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cs4q-qbrx-jfbd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9182?format=api", "vulnerability_id": "VCID-f4qt-s9m9-rbf3", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99672", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99674", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.99673", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327", "reference_id": "1933327", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282", "reference_id": "CVE-2021-25282", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282" }, { "reference_url": "https://github.com/advisories/GHSA-76x4-x3p6-rpr9", "reference_id": "GHSA-76x4-x3p6-rpr9", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-76x4-x3p6-rpr9" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25282", "GHSA-76x4-x3p6-rpr9", "PYSEC-2021-51" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f4qt-s9m9-rbf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9477?format=api", "vulnerability_id": "VCID-kxut-sccv-g7hu", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.9191", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.91918", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.91882", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336", "reference_id": "1933336", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148", "reference_id": "CVE-2021-3148", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148" }, { "reference_url": "https://github.com/advisories/GHSA-ghc2-hx3w-jqmp", "reference_id": "GHSA-ghc2-hx3w-jqmp", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ghc2-hx3w-jqmp" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3148", "GHSA-ghc2-hx3w-jqmp", "PYSEC-2021-55" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kxut-sccv-g7hu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9183?format=api", "vulnerability_id": "VCID-p435-eq6q-6udb", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93257", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93255", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93234", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331", "reference_id": "1933331", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283", "reference_id": "CVE-2021-25283", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283" }, { "reference_url": "https://github.com/advisories/GHSA-xgmh-gfxw-2hvv", "reference_id": "GHSA-xgmh-gfxw-2hvv", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xgmh-gfxw-2hvv" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25283", "GHSA-xgmh-gfxw-2hvv", "PYSEC-2021-52" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p435-eq6q-6udb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9475?format=api", "vulnerability_id": "VCID-phas-8df3-mfez", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90454", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90416", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.90446", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344", "reference_id": "1933344", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144", "reference_id": "CVE-2021-3144", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144" }, { "reference_url": "https://github.com/advisories/GHSA-w2hr-3mc8-46gh", "reference_id": "GHSA-w2hr-3mc8-46gh", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w2hr-3mc8-46gh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3144", "GHSA-w2hr-3mc8-46gh", "PYSEC-2021-54" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-phas-8df3-mfez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/218112?format=api", "vulnerability_id": "VCID-r3en-yzud-bqbm", "summary": "An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.", "references": [ { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "PYSEC-2021-362" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r3en-yzud-bqbm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9181?format=api", "vulnerability_id": "VCID-wk15-cb1u-eqdq", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93846", "scoring_system": "epss", "scoring_elements": "0.99875", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.93846", "scoring_system": "epss", "scoring_elements": "0.99876", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325", "reference_id": "1933325", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "202103-01", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "202310-22", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/", "reference_id": "active-saltstack-cve-announced-2021-jan-21", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "active-saltstack-cve-release-2021-feb-25", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281", "reference_id": "CVE-2021-25281", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "dsa-5011", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://github.com/advisories/GHSA-xxw3-765m-f37p", "reference_id": "GHSA-xxw3-765m-f37p", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xxw3-765m-f37p" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "msg00009.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "releases", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_id": "SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-19T15:42:04Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25281", "GHSA-xxw3-765m-f37p", "PYSEC-2021-50" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wk15-cb1u-eqdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8445?format=api", "vulnerability_id": "VCID-xfxm-a3ku-a7h4", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80974", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80905", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80964", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://sec.stealthcopter.com/cve-2020-28243/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350", "reference_id": "1933350", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350" }, { "reference_url": "https://github.com/stealthcopter/CVE-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/stealthcopter/CVE-2020-28243" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243", "reference_id": "CVE-2020-28243", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://sec.stealthcopter.com/cve-2020-28243" }, { "reference_url": "https://github.com/advisories/GHSA-phhw-3wc9-8q75", "reference_id": "GHSA-phhw-3wc9-8q75", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-phhw-3wc9-8q75" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28243", "GHSA-phhw-3wc9-8q75", "PYSEC-2021-73" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xfxm-a3ku-a7h4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8567?format=api", "vulnerability_id": "VCID-z8vc-drx3-h3an", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73683", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73668", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73593", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342", "reference_id": "1933342", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "202103-01", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "202310-22", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "active-saltstack-cve-release-2021-feb-25", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662", "reference_id": "CVE-2020-35662", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "dsa-5011", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://github.com/advisories/GHSA-qx72-q6w3-qgc7", "reference_id": "GHSA-qx72-q6w3-qgc7", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qx72-q6w3-qgc7" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "msg00009.html", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://usn.ubuntu.com/6948-1/", "reference_id": "USN-6948-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6948-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-15T17:16:09Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48523?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-7x4f-zpct-c3bu" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/22541?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/49372?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-2mr2-ay52-ukfr" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-pe42-24cs-8bez" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wf18-b4yg-fubs" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/49375?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/22545?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/49002?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-s7hs-dp3a-q7d7" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23022?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-4ves-wum1-euag" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f8n4-5qt1-mkb2" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-vzwy-puuc-k3d4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/21742?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-f1xu-mwpj-mbe5" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-v5pd-vfpm-zyc2" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/21740?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-2h6n-g22y-bbg7" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-3yky-j8mz-wuhz" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56394?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-hn2t-d2ym-mybb" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-n5hz-xs2w-u3dt" }, { "vulnerability": "VCID-nmsg-9zgt-g7g6" }, { "vulnerability": "VCID-r949-kjex-xqh9" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/61166?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-8ggu-kfdt-akgd" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-c3vw-1g12-vff7" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4bf-ncuj-mbaq" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23027?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/62737?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/23037?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62738?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/23007?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-fauf-vjt1-7bgu" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/23014?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-8az5-5kg7-yfb2" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-b2df-ykkt-dud1" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-cs4q-qbrx-jfbd" }, { "vulnerability": "VCID-f4qt-s9m9-rbf3" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-kxut-sccv-g7hu" }, { "vulnerability": "VCID-p435-eq6q-6udb" }, { "vulnerability": "VCID-phas-8df3-mfez" }, { "vulnerability": "VCID-r3en-yzud-bqbm" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-wk15-cb1u-eqdq" }, { "vulnerability": "VCID-xfxm-a3ku-a7h4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" }, { "vulnerability": "VCID-z8vc-drx3-h3an" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/23063?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1qwk-r5xw-rubd" }, { "vulnerability": "VCID-3q7a-nzue-5ken" }, { "vulnerability": "VCID-47fc-3b14-4uha" }, { "vulnerability": "VCID-785e-fxwd-s7bz" }, { "vulnerability": "VCID-894v-eb8v-p3dk" }, { "vulnerability": "VCID-axae-4zgs-9bfb" }, { "vulnerability": "VCID-bpp3-fcyq-2uaq" }, { "vulnerability": "VCID-gtes-baaj-7beu" }, { "vulnerability": "VCID-h7qv-ty6k-rkfg" }, { "vulnerability": "VCID-he35-2eaz-qkdq" }, { "vulnerability": "VCID-jnqb-7xsu-cyhp" }, { "vulnerability": "VCID-t5b4-31st-b7er" }, { "vulnerability": "VCID-ve75-ee6s-huhq" }, { "vulnerability": "VCID-vfyt-s2em-8kd4" }, { "vulnerability": "VCID-z6cg-d8vs-tybn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-35662", "GHSA-qx72-q6w3-qgc7", "PYSEC-2021-75" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z8vc-drx3-h3an" } ], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }