https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:29:03 +0000 https://cve.radiocsirt.org/vuln/cve-2025-22242 <p><strong>Affected:</strong> VMware SALT</p> <p>Worker process denial of service through file read operation. .A vulnerability exists in the Master&#39;s “pub_ret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by attempting to read from a filename that will not return any data, e.g. by targeting a pipe node on the proc file system.</p> <p><strong>Affected:</strong> VMware SALT</p> <p>Worker process denial of service through file read operation. .A vulnerability exists in the Master&#39;s “pub_ret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by attempting to read from a filename that will not return any data, e.g. by targeting a pipe node on the proc file system.</p> https://cve.radiocsirt.org/vuln/cve-2025-22242 https://cve.radiocsirt.org/vuln/ghsa-989c-m532-p2hv <p><strong>Affected:</strong> PyPI: salt</p> <p>Worker process denial of service through file read operation. .A vulnerability exists in the Master&#39;s “pub_ret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by attempting to read from a filename that will not return any data, e.g. by targeting a pipe node on the proc file system.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>Worker process denial of service through file read operation. .A vulnerability exists in the Master&#39;s “pub_ret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by attempting to read from a filename that will not return any data, e.g. by targeting a pipe node on the proc file system.</p> https://cve.radiocsirt.org/vuln/ghsa-989c-m532-p2hv