How many CVEs have a located fix in saltstack/salt?

27 published CVEs have a fix traced to functions in saltstack/salt, touching 108 functions across 36 files.

Which function in saltstack/salt has been patched by the most CVEs?

start in salt/master.py has been changed by 4 CVE fixes, from 2013 to 2025.

How large is a typical CVE fix in saltstack/salt?

The median fix changes 22 lines. 48% of fixes change 20 lines or fewer, and 22% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

#182 of 500 repositories

saltstack/salt

Name: saltstack/salt: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix January 30, 2026

27

CVE fixes located

Published CVEs

108

Functions patched

Distinct function sites

36

Files patched

Distinct source files

2013–2026

Years covered

By CVE publication date

Overview

27 published CVEs have a fix traced to functions in saltstack/salt, the earliest published in 2013. Those fixes changed 108 distinct functions across 36 files, in 259 patch hunks.

Among the 500 repositories tracked here, saltstack/salt ranks #182 by the number of CVEs with a located fix.

Most patched functions

Functions in saltstack/salt changed by the most CVE fixes.

Most patched files

Files in saltstack/salt changed by the most CVE fixes.

1salt/master.py9 CVEs · 15 functions
2salt/utils/verify.py7 CVEs · 5 functions
3salt/utils/gitfs.py4 CVEs · 3 functions
4salt/pillar/__init__.py4 CVEs · 2 functions
5salt/modules/win_firewall.py3 CVEs · 3 functions
6salt/fileserver/__init__.py3 CVEs · 2 functions
7salt/fileclient.py2 CVEs · 9 functions
8salt/crypt.py2 CVEs · 7 functions
9salt/transport/tcp.py2 CVEs · 6 functions
10salt/channel/server.py2 CVEs · 5 functions

Fix size

How much code a CVE fix in saltstack/salt changes, with backports counted once.

22

Median lines changed

Added plus removed, per CVE

48%

Fixes of 20 lines or fewer

Share of CVE fixes

22%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in saltstack/salt, and the functions each fix changed.

Salt Master authentication protocol downgrade may enable minion impersonation
CVE-2025-62349handle_message _gather_buffer_space
High · CVSS 7.5
EPSS 0.5%2026-01-30
Salt junos module uses an unsafe YAML loader which may allow unintended code execution
CVE-2025-62348get_table
High · CVSS 7.3
EPSS 0.2%2026-01-30
CVE-2024-38824 salt advisory
CVE-2024-38824_file_recv
Critical · CVSS 9.6
EPSS 1.0%2025-06-13
CVE-2025-22242 salt advisory
CVE-2025-22242_return pub_ret __verify_minion
Medium · CVSS 5.6
EPSS 0.1%2025-06-13
CVE-2025-22241 salt advisory
CVE-2025-22241URLValidator populate_secrets start
Medium · CVSS 5.6
EPSS 0.2%2025-06-13
CVE-2025-22240 salt advisory
CVE-2025-22240clean_join find_file
Medium · CVSS 6.3
EPSS 0.2%2025-06-13
CVE-2025-22239 salt advisory
CVE-2025-22239valid_minion_tag _minion_event
High · CVSS 8.1
EPSS 0.2%2025-06-13
CVE-2025-22238 salt advisory
CVE-2025-22238clean_path save_minions SaltValidationError
Medium · CVSS 4.2
EPSS 0.3%2025-06-13
CVE-2025-22237 salt advisory
CVE-2025-22237URLValidator populate_secrets start
Medium · CVSS 6.7
EPSS 0.2%2025-06-13
Salt's salt.auth.pki module does not properly authenticate callers
CVE-2024-38825handle_message _decode_payload URLValidator
Medium · CVSS 6.4
EPSS 0.2%2025-06-13
Salt preflight script could be attacker controlled
CVE-2023-34049run_ssh_pre_flight shim_cmd key_deploy
Medium · CVSS 6.7
EPSS 0.2%2024-11-14
Path traversal in saltstack
CVE-2024-22232serve_file find_file _syndic_return
High · CVSS 7.7
EPSS 0.8%2024-06-27

Get an alert for each new saltstack/salt CVE, with the patched functions and AI-written analysis.

Monitor salt CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

axios/axios27 CVEs bytecodealliance/wasmtime27 CVEs GNOME/gimp27 CVEs kanboard/kanboard27 CVEs MacWarrior/clipbucket-v527 CVEs nimiq/core-rs-albatross27 CVEs RIOT-OS/RIOT27 CVEs strukturag/libheif27 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in saltstack/salt.

How many CVEs have a located fix in saltstack/salt?: 27 published CVEs have a fix traced to functions in saltstack/salt, touching 108 functions across 36 files.
Which function in saltstack/salt has been patched by the most CVEs?: start in salt/master.py has been changed by 4 CVE fixes, from 2013 to 2025.
How large is a typical CVE fix in saltstack/salt?: The median fix changes 22 lines. 48% of fixes change 20 lines or fewer, and 22% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track saltstack/salt CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing