s
saltstack
Security Risk Profile
55
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 102 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2013 to present
102
Total CVEs
43
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
55/100
medium
Severity Distribution
Critical
22High
21Medium
14Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
8
2
Input Validation
5
3
Command Injection
4
4
Infoleak
4
5
OS Command Injection
3
Most Affected Products
1. SaltStack Salt436
2. pip/salt194
3. alpine/salt151
4. Debian Debian Linux47
5. Fedoraproject Fedora40
Recent Vulnerabilities
See more →EOL-salt-3008
unknown
May 27, 2026
saltproject-2026-04-29-advisory
unknown
Supply Chain Incident - 2026-Apr-29
Apr 29, 2026
saltproject-2025-11-20-advisory-3006-17-3007-9
unknown
Salt security advisory release - 2025-NOV-20
Nov 20, 2025
CVE-2024-38824
CVSS 9.6critical
salt advisory
Jun 13, 2025
saltproject-2025-06-12-advisory-3006-12-3007-4
unknown
Salt security advisory release - 2025-JUN-12
Jun 12, 2025
EOL-salt-3006
unknown
Jul 30, 2024
latest-version-salt-3006
unknown
Jul 30, 2024
latest-version-salt-3007
unknown
Mar 6, 2024
EOL-salt-3007
unknown
Mar 6, 2024
saltproject-2024-01-31-advisory
unknown
Salt security advisory release - 2024-JAN-31
Jan 31, 2024
Monitor saltstack in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.