Approved changes feed: RSS · Atom

cpe:2.3:a:saltstack:salt:0.8.8:*:*:*:*:*:*:*

part: a version: 0.8.8 update: *

VendorSaltstack (505beb5a-4fc5-5540-9632-5d28b16aab0d)
ProductSalt (dd0d2bbf-d65f-5171-9eae-a243e2f3cc18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/saltstack/salt purl2cpe 2026-06-01 10:16:14.738840
pkg:rpm/fedora/salt purl2cpe 2026-06-01 10:16:14.738841
pkg:rpm/opensuse/salt purl2cpe 2026-06-01 10:16:14.738843

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4438 vulnerable 2026-06-08 05:04:46.725335 Details available
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.
Published: 2013-11-05T18:00:00.000Z
Updated: 2024-09-17T03:54:13.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.