Puppet puppetlabs-apt
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-3275 | unspecified – < 9.0.0 | Puppetlabs-apt Command Injection | CRITICAL 9.8 | 2.4 % | ||
| CVE-2018-6508 | prior to 4.5.1 | Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the fa | HIGH 8.0 | 1.9 % |