{"action":"Upgrade salt to 2014.1.10 or later.","affected":[{"fixed":"2014.1.10","introduced":"0"}],"component":"salt","cve_ids":["CVE-2014-3563"],"ecosystem":"PyPI","epss":0.00407,"exploited":false,"fixed_versions":["2014.1.10"],"ghsa_id":"GHSA-mfr3-9cj8-h2qm","id":"tcs_01M5KG61WX8X4XRMJ6A56Y81N5","modified_at":"2026-06-10T17:02:35.824541437Z","published_at":"2014-08-22T17:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-18","http://seclists.org/oss-sec/2014/q3/428","http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html","http://www.securityfocus.com/bid/69319","https://exchange.xforce.ibmcloud.com/vulnerabilities/95392","https://github.com/advisories/GHSA-mfr3-9cj8-h2qm"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-18","url":"https://osv.dev/vulnerability/PYSEC-2014-18"}],"summary":"Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ss"}