Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zeat-rzj9-u3br
Summary
Salt vulnerable to arbitrary event injection
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
Aliases
0
alias CVE-2025-22239
1
alias GHSA-c46w-gr7f-jm2p
Fixed_packages
0
url pkg:pypi/salt@3006.12
purl pkg:pypi/salt@3006.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxhr-smeg-k7fj
1
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.12
1
url pkg:pypi/salt@3007.4
purl pkg:pypi/salt@3007.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fxhr-smeg-k7fj
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.4
Affected_packages
0
url pkg:pypi/salt@3006.0rc1
purl pkg:pypi/salt@3006.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-nehw-r7zm-j7bb
5
vulnerability VCID-r4b7-j6au-fucm
6
vulnerability VCID-rnh5-7394-dfea
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc1
1
url pkg:pypi/salt@3006.0rc2
purl pkg:pypi/salt@3006.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-nehw-r7zm-j7bb
5
vulnerability VCID-r4b7-j6au-fucm
6
vulnerability VCID-rnh5-7394-dfea
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc2
2
url pkg:pypi/salt@3006.0rc3
purl pkg:pypi/salt@3006.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-nehw-r7zm-j7bb
5
vulnerability VCID-r4b7-j6au-fucm
6
vulnerability VCID-rnh5-7394-dfea
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc3
3
url pkg:pypi/salt@3006.0
purl pkg:pypi/salt@3006.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-ce2x-ehyk-nufk
3
vulnerability VCID-em78-j177-kffg
4
vulnerability VCID-fwas-eecc-3bau
5
vulnerability VCID-fwpy-42pu-8ub3
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-r4b7-j6au-fucm
9
vulnerability VCID-rnh5-7394-dfea
10
vulnerability VCID-sc4b-v7j2-byed
11
vulnerability VCID-t99c-dqd5-ukfk
12
vulnerability VCID-yt34-n551-1uau
13
vulnerability VCID-zeat-rzj9-u3br
14
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0
4
url pkg:pypi/salt@3006.1
purl pkg:pypi/salt@3006.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-ce2x-ehyk-nufk
3
vulnerability VCID-em78-j177-kffg
4
vulnerability VCID-fwas-eecc-3bau
5
vulnerability VCID-fwpy-42pu-8ub3
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-r4b7-j6au-fucm
9
vulnerability VCID-rnh5-7394-dfea
10
vulnerability VCID-sc4b-v7j2-byed
11
vulnerability VCID-t99c-dqd5-ukfk
12
vulnerability VCID-yt34-n551-1uau
13
vulnerability VCID-zeat-rzj9-u3br
14
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.1
5
url pkg:pypi/salt@3006.2
purl pkg:pypi/salt@3006.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-rnh5-7394-dfea
8
vulnerability VCID-sc4b-v7j2-byed
9
vulnerability VCID-t99c-dqd5-ukfk
10
vulnerability VCID-yt34-n551-1uau
11
vulnerability VCID-zeat-rzj9-u3br
12
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2
6
url pkg:pypi/salt@3006.3
purl pkg:pypi/salt@3006.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-rnh5-7394-dfea
8
vulnerability VCID-sc4b-v7j2-byed
9
vulnerability VCID-t99c-dqd5-ukfk
10
vulnerability VCID-yt34-n551-1uau
11
vulnerability VCID-zeat-rzj9-u3br
12
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.3
7
url pkg:pypi/salt@3006.4
purl pkg:pypi/salt@3006.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.4
8
url pkg:pypi/salt@3006.5
purl pkg:pypi/salt@3006.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.5
9
url pkg:pypi/salt@3006.6
purl pkg:pypi/salt@3006.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6
10
url pkg:pypi/salt@3006.7
purl pkg:pypi/salt@3006.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.7
11
url pkg:pypi/salt@3006.8
purl pkg:pypi/salt@3006.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.8
12
url pkg:pypi/salt@3006.9
purl pkg:pypi/salt@3006.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.9
13
url pkg:pypi/salt@3006.10
purl pkg:pypi/salt@3006.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.10
14
url pkg:pypi/salt@3006.11
purl pkg:pypi/salt@3006.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.11
15
url pkg:pypi/salt@3007.0rc1
purl pkg:pypi/salt@3007.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-r4b7-j6au-fucm
4
vulnerability VCID-sc4b-v7j2-byed
5
vulnerability VCID-t99c-dqd5-ukfk
6
vulnerability VCID-yt34-n551-1uau
7
vulnerability VCID-zeat-rzj9-u3br
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.0rc1
16
url pkg:pypi/salt@3007.0
purl pkg:pypi/salt@3007.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.0
17
url pkg:pypi/salt@3007.1
purl pkg:pypi/salt@3007.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.1
18
url pkg:pypi/salt@3007.2
purl pkg:pypi/salt@3007.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.2
19
url pkg:pypi/salt@3007.3
purl pkg:pypi/salt@3007.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-22239
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34471
published_at 2026-06-07T12:55:00Z
1
value 0.00144
scoring_system epss
scoring_elements 0.34507
published_at 2026-06-06T12:55:00Z
2
value 0.00144
scoring_system epss
scoring_elements 0.34491
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-22239
1
reference_url https://docs.saltproject.io/en/3006/topics/releases/3006.12.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-13T13:50:17Z/
url https://docs.saltproject.io/en/3006/topics/releases/3006.12.html
2
reference_url https://docs.saltproject.io/en/3007/topics/releases/3007.4.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-13T13:50:17Z/
url https://docs.saltproject.io/en/3007/topics/releases/3007.4.html
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://github.com/saltstack/salt/commit/41d834bf800d86fc496e4fac2d3875fc2aca7c62
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/41d834bf800d86fc496e4fac2d3875fc2aca7c62
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-22239
reference_id CVE-2025-22239
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-22239
7
reference_url https://github.com/advisories/GHSA-c46w-gr7f-jm2p
reference_id GHSA-c46w-gr7f-jm2p
reference_type
scores
url https://github.com/advisories/GHSA-c46w-gr7f-jm2p
Weaknesses
0
cwe_id 285
name Improper Authorization
description The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zeat-rzj9-u3br