Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-xxw3-765m-f37p

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xxw3-765m-f37p

SaltStack Salt Improper Authentication vulnerability An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

gitlab/pypi/salt/CVE-2021-25281

SaltStack Salt Improper Authentication vulnerability An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

pypa/salt/PYSEC-2021-50

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

pysec/PYSEC-2021-50

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.