https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:49:52.558533+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-3148 CVE-2021-3148 2026-10-02T15:49:52.589410+00:00

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.

 https://cve.radiocsirt.org/vuln/ghsa-ghc2-hx3w-jqmp GHSA-ghc2-hx3w-jqmp — SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 2026-10-02T15:49:52.589460+00:00

Affected: PyPI: salt

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in `salt.utils.thin.gen_thin()` command injection because of different handling of single versus double quotes. This is related to `salt/utils/thin.py`.