{"action":"Upgrade salt to 3005.2 or later.","affected":[{"fixed":"3005.2","introduced":"0"},{"fixed":"3006.2","introduced":"3006.0"}],"component":"salt","cve_ids":["CVE-2023-20897"],"ecosystem":"PyPI","epss":0.01245,"exploited":false,"fixed_versions":["3006.2","3005.2"],"ghsa_id":"GHSA-vpjg-wmf8-29h9","id":"tcs_01M5KGJMZRNS1X7NZ3VPX57Y2N","modified_at":"2026-06-10T17:02:40.153819414Z","published_at":"2023-09-05T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-166","https://saltproject.io/security-announcements/2023-08-10-advisory/","https://github.com/advisories/GHSA-vpjg-wmf8-29h9"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2023-166","url":"https://osv.dev/vulnerability/PYSEC-2023-166"}],"summary":"Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons"}