~ / search / GHSA-77w2-v593-vxvv

GHSA-77w2-v593-vxvv

Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload

Source: GitHub Advisory Database (reviewed) High CVE-2025-62348

Packages

EcosystemPackageAffectedFixed in
PyPI salt < 3006.17 3006.17

Details

As written in the advisory (Markdown source, shown as plain text).

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.

References

External links from the advisory. They lead to third-party sites.