saltbundlepy-pyzmq (SUSE:EL-9:Update:Products:SaltBundle:Update) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:EL-9:Update:Products:SaltBundle:Update package saltbundlepy-pyzmq, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2025-62348 — CVSS 7.8 (high): Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module…
• CVE-2025-67725 — CVSS 7.5 (high): Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP…
• CVE-2025-67726 — CVSS 7.5 (high): Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing…
• CVE-2025-13836 — CVSS 7.5 (high): When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This…
• CVE-2025-62349 — CVSS 6.2 (medium): Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer…
• CVE-2025-67724 — CVSS 5.4 (medium): Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used…
• CVE-2023-20897 — CVSS 5.3 (medium): Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to…
• CVE-2023-20898 — CVSS 4.2 (medium): Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or…