{"action":"Upgrade salt to 2018.3.4 or later.","affected":[{"fixed":"2018.3.4","introduced":"0"}],"component":"salt","cve_ids":["CVE-2019-1010259"],"ecosystem":"PyPI","epss":0.01898,"exploited":false,"fixed_versions":["2018.3.4"],"ghsa_id":"GHSA-h8xp-h3jf-wv4v","id":"tcs_01M5KG8DYWZF4BNDWCAN5XRMF4","modified_at":"2026-06-10T17:02:38.032434832Z","published_at":"2019-07-18T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-119","https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534","https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a","https://github.com/saltstack/salt/pull/51462","https://github.com/advisories/GHSA-h8xp-h3jf-wv4v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-119","url":"https://osv.dev/vulnerability/PYSEC-2019-119"}],"summary":"SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mys"}