PyPI/salt CVE-2021-25315: high 7.8, EPSS 2.29%

Saltstack Salt Unauthenticated Arbitrary Code Execution

Action: Upgrade salt to 3002.2 or later.

pip install salt==3002.2

Affected

Fixed versions

Sources

• osv: GHSA-pmj6-9f8c-8g2m
• https://nvd.nist.gov/vuln/detail/CVE-2021-25315
• https://bugzilla.suse.com/show_bug.cgi?id=1182382
• https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
• https://github.com/saltstack/salt

CVE-2021-25315 · published 2022-05-24T17:43:35Z · modified 2025-04-09T20:37:28.103233Z · JSON