Salt vulnerable to arbitrary event injection

Salt allows arbitrary directory creation or file deletion

Salt vulnerable to directory traversal attack in minion file cache creation

Salt has minion event bus authorization bypass vulnerability

Salt's on demand pillar functionality vulnerable to arbitrary command injections

Salt's worker process vulnerable to denial of service through file read operation

Salt's file contents overwrite the VirtKey class