Where
-Infinity
0

Trending

Last week
Last month
Last year

SaltStack Salt 3008End of life details

EOL
Jun 30, 2028
Support Ends
Jun 30, 2027
First published (updated )
EOL-salt-3008

pip/saltsalt advisory

Risk 68
Severity
9.6
First published (updated )
CVE-2024-38824

SaltStack Salt 3006Out of support

EOL
Jun 30, 2027
Support Ends
Jul 31, 2026
First published (updated )
EOL-salt-3006

SaltStack Salt 3006Out of support

EOL
Jun 30, 2027
Support Ends
Jul 31, 2026
First published (updated )
latest-version-salt-3006

SaltStack Salt 3007Reached end of life

EOL
Jul 31, 2026
Support Ends
Jun 30, 2026
First published (updated )
latest-version-salt-3007
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SaltStack Salt 3007Reached end of life

EOL
Jul 31, 2026
Support Ends
Jun 30, 2026
First published (updated )
EOL-salt-3007

SaltStack SaltCommand Injection

Risk 89
Severity
9.8
First published (updated )
CVE-2021-3148

SaltStack SaltToken can be used once after expiration

Risk 69
Severity
9.1
First published (updated )
CVE-2021-3144

SaltStack SaltLast updated 8 August 2024

Risk 89
Severity
9.8
First published (updated )
CVE-2021-3197

SaltStack SaltSaltStack Salt Shell Injection Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2020-16846
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SaltStack SaltSaltStack Salt Path Traversal Vulnerability

Risk 65
Severity
6.5
Exploited
First published (updated )
CVE-2020-11652

SaltStack SaltSaltStack Salt Authentication Bypass Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2020-11651

debian/saltCommand Injection

Risk 89
Severity
9.8
First published (updated )
CVE-2019-17361

pip/saltSaltStack RSA Key Generation allows remote users to decrypt communications

Risk 78
Severity
8.1
First published (updated )
CVE-2013-2228

debian/saltSQL Injection

Risk 89
Severity
9.8
First published (updated )
CVE-2019-1010259
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/saltPath Traversal

Risk 28
Severity
5.3
First published (updated )
CVE-2018-15750

pip/saltLast updated 25 August 2025

Risk 89
Severity
9.8
First published (updated )
CVE-2018-15751

SaltStack SaltInfoleak

Risk 71
Severity
7.8
First published (updated )
CVE-2017-8109

pip/saltSalt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related t…

Risk 69
Severity
9.1
First published (updated )
CVE-2016-9639

SaltStack SaltSalt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, all…

Risk 44
Severity
5.6
First published (updated )
CVE-2016-3176
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/saltInfoleak

Risk 18
Severity
3.3
First published (updated )
CVE-2015-8034

redhat/SaltStackmodules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

Risk 41
Severity
5.3
First published (updated )
CVE-2015-1839

pip/saltmodules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

Risk 41
Severity
5.3
First published (updated )
CVE-2015-1838

pip/saltInput Validation

Risk 83
Severity
9.3
First published (updated )
CVE-2013-4436

SaltStack SaltThe salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privilege…

Risk 90
Severity
7.5
First published (updated )
CVE-2013-6617
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203